CVE-2025-63681

Description

open-webui is Vulnerable to Incorrect Access Control

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-63681
• https://github.com/TOAST-Research/pocs/blob/main/openwebui/arbitirary_task_stop/report.md
• https://github.com/open-webui/open-webui
• https://github.com/open-webui/open-webui/blob/46ae3f4f5d7d4d706041bdae4ad2d802e568712b/backend/open_webui/main.py#L1652