CVE-2026-44566 is a high severity path traversal and unrestricted upload flaw (CVSS 7.3) in Open WebUI before version 0.1.124. File names in uploads are not sanitized, so users can write files outside the uploads folder. Upgrade to 0.1.124 or later, and ideally a current release.
What's affected
From the project advisory for the open-webui PyPI package:
- Affected: 0.1.123 and earlier.
- Fixed: 0.1.124.
Version 0.1.124 is very old. Most current installations should already be well past it, but older containers, forks and pinned images are worth checking. The advisory text comes from a report dated in 2024, which was assigned a CVE in 2026.
How to check if you're exposed
Check the installed version:
pip show open-webui
docker ps --format '{{.Image}} {{.Names}}' | grep -i open-webui
Anything at or below 0.1.123 is in range. Also check the account the service runs as, since the write goes anywhere that account can write.
What to do now
- Upgrade Open WebUI to 0.1.124 or later, and ideally to a current release.
- Run the service as a user that can write only to its own data folder, and use a container with a read only root file system where possible.
- Check the host for files that do not belong, especially in folders that are executed or loaded at startup.
- Limit who can create accounts on the instance.
Why it matters
The record lists CWE-22 (path traversal) and CWE-434 (unrestricted upload of file with dangerous type). The file name from the upload request was joined to the uploads folder and used as is. Dot segments in the name walk up the folder tree.
The fix class is to ignore any client supplied path, generate your own file name, and confirm the final path is inside the intended folder. The record does not mark this CVE as KEV.
Quick check
Is this relevant for current Open WebUI users?
Only if you run a version at or below 0.1.123, which is unlikely for a maintained installation.
Sources
Last reviewed: 19 October 2026.
