CVE-2026-109294
6.5MediumPublished 12 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-400
Impact
Authenticated users can crash the server and cause a denial of service for all users by exhausting host memory. They only need a valid user account to submit a chat message containing a malicious image URL.
Root cause
The get_image_base64_from_url function decompresses gzip-encoded remote image responses without size limits.
Affected systems
Open WebUI from 0.6.42 before 0.11.4
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade Open WebUI to version 0.11.4 or later. If upgrading immediately is not possible, restrict untrusted user account creation or block outbound server requests to arbitrary external image hosts.
$ pip install --upgrade open-webuiAI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Open WebUI from 0.6.42 before 0.11.4 contains an uncontrolled resource consumption vulnerability that allows authenticated users to exhaust server memory by supplying compressed remote image URLs in chat messages. Attackers can point the image field at a host returning gzip-encoded responses, which get_image_base64_from_url decompresses unbounded, causing denial of service for all users.