CVE-2026-109298— Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex
Quick assessment
Affected
open-webui open-webui
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Open WebUI 在 0.11.4 之前的 0.11.0 版本中，其知识库和聊天文件搜索功能在编译用户选择的 grep 模式时，使用了在编译时会对嵌套计数重复进行无限扩展的正则表达式引擎，并将结果缓存起来。经过身份验证的用户可以利用短小的嵌套重复模式调用 grep_knowledge_files 函数，导致事件循环被阻塞，并耗尽工作进程的内存资源。
Possible ATT&CK Techniques 1 AI
T1496 · Resource HijackingAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| open-webui | open-webui | 0.11.0< 0.11.4 |
affected |
0.11.4 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-109298
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex
Source: CVE Program / CVE List V5
Vulnerability Description
Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unbounded at compile time and caches the result. Authenticated users can have the model call grep_knowledge_files with short nested-repetition patterns, blocking the event loop and exhausting worker memory.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| open-webui | open-webui | 0.11.0 ~ 0.11.4 | - |
|
II. Public POCs for CVE-2026-109298
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-109298
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-109298 (1)
Vendor Advisories for CVE-2026-109298 (2)
Same Patch Batch · open-webui · 2026-10-12 · 19 CVEs total
| CVE-2026-109286 | 8.1 HIGH | Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal |
| CVE-2026-109572 | 7.6 HIGH | Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy |
| CVE-2026-109291 | 7.3 HIGH | Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url |
| CVE-2026-109290 | 7.3 HIGH | Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview |
| CVE-2026-109292 | 6.8 MEDIUM | Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections |
| CVE-2026-109293 | 6.5 MEDIUM | Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint |
| CVE-2026-109297 | 6.5 MEDIUM | Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules |
| CVE-2026-109294 | 6.5 MEDIUM | Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image |
| CVE-2026-109295 | 6.5 MEDIUM | Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop |
| CVE-2026-109299 | 6.5 MEDIUM | Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation |
| CVE-2026-109288 | 6.4 MEDIUM | Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links |
| CVE-2026-109289 | 6.3 MEDIUM | Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket |
| CVE-2026-109283 | 5.4 MEDIUM | Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange |
| CVE-2026-109285 | 5.0 MEDIUM | Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata |
| CVE-2026-109300 | 4.6 MEDIUM | Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds |
| CVE-2026-109287 | 4.3 MEDIUM | Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID |
| CVE-2026-109296 | 4.3 MEDIUM | Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes |
| CVE-2026-109284 | 4.3 MEDIUM | Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint |
IV. Related Vulnerabilities
Same product: open-webui
-
CVE-2026-109572
Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Term -
CVE-2026-109300
Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Emb -
CVE-2026-109299
Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurre -
CVE-2026-109297
Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automa -
CVE-2026-109295
Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_fil
Same vendor: open-webui
-
CVE-2026-109572
Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Term -
CVE-2026-109300
Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Emb -
CVE-2026-109299
Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurre -
CVE-2026-109297
Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automa -
CVE-2026-109296
Open WebUI before 0.11.4 Missing Authorization via Backend I
Same weakness: CWE-400
-
CVE-2026-101896
Angular: Denial of Service via Numeric URL Matrix Parameters -
CVE-2026-101895
Angular SSR: Denial of Service (DoS) via Infinite Loop on Ma -
CVE-2026-73130
Gitea repository initialization resource exhaustion -
CVE-2026-60021
Gitea GitLab migration denial of service -
CVE-2026-60018
Gitea OneDev migration denial of service
V. Comments for CVE-2026-109298
No comments yet