CVE-2026-109295
6.5MediumPublished 12 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-1333
Impact
Authenticated users can cause a denial of service by stalling server workers and blocking the event loop. Attackers need network access and an authenticated account to submit crafted search queries to the model.
Root cause
The grep_knowledge_files and grep_chat_files functions evaluate user-supplied file search patterns with a regular expression vulnerable to catastrophic backtracking.
Affected systems
Open WebUI 0.11.0 before 0.11.4
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade to Open WebUI 0.11.4 or later. If upgrading immediately is not possible, disable or restrict access to file search tools (grep_knowledge_files and grep_chat_files).
$ pip install --upgrade open-webui==0.11.4AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Open WebUI from 0.11.0 before 0.11.4 contains a regular expression denial of service vulnerability that allows authenticated users to stall server workers via file search patterns. Attackers can instruct the model to call grep_knowledge_files or grep_chat_files with a catastrophically backtracking regex, blocking the event loop for two seconds per repeated call.