CVE-2026-44551— Open WebUI: LDAP Empty Password Authentication Bypass
Quick assessment
Affected
open-webui open-webui
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Open WebUI是Open WebUI开源的一个可扩展、功能丰富、用户友好的自托管 WebUI。 Open WebUI 0.9.0之前版本存在授权问题漏洞，该漏洞源于LDAP认证端点未验证提交密码非空即执行简单绑定，LdapForm Pydantic模型接受password: str且无最小长度约束，空字符串通过验证，后续Connection.bind()调用在易受攻击的LDAP服务器上成功，应用程序为目标用户发放完整会话令牌。
Public Exploits 1
Nuclei · 1
CVE-2026-44551.yaml [template]
Possible ATT&CK Techniques 1 AI
T1078 · Valid AccountsAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| open-webui | open-webui | < 0.9.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-44551
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Open WebUI: LDAP Empty Password Authentication Bypass
Source: CVE Program / CVE List V5
Vulnerability Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accepts password: str with no minimum length constraint, so an empty string passes validation. The subsequent Connection.bind() call succeeds on vulnerable LDAP servers, and the application issues a full session token for the target user. This vulnerability is fixed in 0.9.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
认证机制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Open WebUI 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Open WebUI是Open WebUI开源的一个可扩展、功能丰富、用户友好的自托管 WebUI。 Open WebUI 0.9.0之前版本存在授权问题漏洞，该漏洞源于LDAP认证端点未验证提交密码非空即执行简单绑定，LdapForm Pydantic模型接受password: str且无最小长度约束，空字符串通过验证，后续Connection.bind()调用在易受攻击的LDAP服务器上成功，应用程序为目标用户发放完整会话令牌。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| open-webui | open-webui | < 0.9.0 | - |
|
II. Public POCs for CVE-2026-44551
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accepts password: str with no minimum length constraint, so an empty string passes validation. The subsequent Connection.bind() call succeeds on vulnerable LDAP servers, and the application issues a full session token for the target user. This vulnerability is fixed in 0.9.0. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44551.yaml | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-44551
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-44551 (1)
Same Patch Batch · open-webui · 2026-05-15 · 59 CVEs total
| CVE-2026-45672 | 8.8 HIGH | Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature g |
| CVE-2026-45315 | 8.7 HIGH | Open WebUI: Stored XSS via attacker-controlled file extension in /api/v1/audio/transcripti |
| CVE-2026-44552 | 8.7 HIGH | Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Ena |
| CVE-2026-45331 | 8.5 HIGH | Open WebUI: Full SSRF Vulnerability in the RAG Web Search Feature |
| CVE-2026-45400 | 8.5 HIGH | Open WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url` |
| CVE-2026-45401 | 8.5 HIGH | Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints |
| CVE-2026-44570 | 8.3 HIGH | Open WebUI: Inconsistent authorization controls within memories API |
| CVE-2026-44565 | 8.1 HIGH | Open WebUI: Open WebUI Arbitrary File Write, Delete via Path Traversal |
| CVE-2026-45675 | 8.1 HIGH | Open WebUI: LDAP and OAuth First-User Race Condition Allows Multiple Admin Accounts |
| CVE-2026-44553 | 8.1 HIGH | Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User No |
| CVE-2026-44554 | 8.1 HIGH | Open WebUI: Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overw |
| CVE-2026-45301 | 8.1 HIGH | Open WebUI: Missing permission check in files API allows authenticated users to list, acce |
| CVE-2026-45665 | 8.1 HIGH | Open WebUI: Stored XSS in Banner Component via Improper Sanitization Order |
| CVE-2026-45402 | 8.1 HIGH | Open WebUI: Cross-User File Access via Unchecked file_id in Folder Knowledge and Knowledge |
| CVE-2026-45671 | 8.0 HIGH | Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion |
| CVE-2026-45303 | 7.7 HIGH | Open WebUI: Stored XSS via the HTML renedering view |
| CVE-2026-45338 | 7.7 HIGH | Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py) |
| CVE-2026-44555 | 7.6 HIGH | Open WebUI: Base Model Routing Bypasses Access Control via Model Chaining |
| CVE-2026-45398 | 7.5 HIGH | Open WebUI: IDOR - Retrieval API Bypasses Knowledge Base Access Controls |
| CVE-2026-44721 | 7.3 HIGH | Open WebUI: Stored XSS via Model Description |
Showing top 20 of 59 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: open-webui
-
CVE-2026-88006
Open WebUI: Users denied by the OAuth role policy can still -
CVE-2026-88005
Open WebUI: Users denied by the OAuth domain allowlist or ro -
CVE-2026-88002
Open WebUI: Any authenticated user can hang the server via a -
CVE-2026-88001
Open WebUI: Server-side fetches reach blocked and internal h -
CVE-2026-88000
Open WebUI: Any authenticated user can hang the server via m
Same vendor: open-webui
-
CVE-2026-88006
Open WebUI: Users denied by the OAuth role policy can still -
CVE-2026-88005
Open WebUI: Users denied by the OAuth domain allowlist or ro -
CVE-2026-88002
Open WebUI: Any authenticated user can hang the server via a -
CVE-2026-88001
Open WebUI: Server-side fetches reach blocked and internal h -
CVE-2026-88000
Open WebUI: Any authenticated user can hang the server via m
Same weakness: CWE-287
-
CVE-2026-92227
Joomla! Core - [20260914] - Core - MFA Authentication Bypass -
CVE-2026-102248
Rebuild Login Endpoint login improper authentication -
CVE-2026-101281
Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c o -
CVE-2026-102364
mall4j through 4.0 Improper Authentication Accepts Storefron -
CVE-2026-101073
Netcore NR289-GE CGI Dispatcher boa improper authentication
V. Comments for CVE-2026-44551
No comments yet