open-webui OpenWebUI up to 0.3.0 API Endpoint transcriptions file.content_type unrestricted upload

Summaryinfo

A vulnerability identified as critical has been detected in open-webui OpenWebUI up to 0.3.0. Impacted is the function file.content_type of the file /audio/api/v1/transcriptions of the component API Endpoint. The manipulation leads to unrestricted upload. This vulnerability is traded as CVE-2024-8060. It is possible to initiate the attack remotely. There is no exploit available.

Detailsinfo

A vulnerability was found in open-webui OpenWebUI up to 0.3.0. It has been rated as critical. This issue affects the function file.content_type of the file /audio/api/v1/transcriptions of the component API Endpoint. The manipulation with an unknown input leads to a unrestricted upload vulnerability. Using CWE to declare the problem leads to CWE-434. The product allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. Impacted is integrity, and availability. The summary by CVE is:

OpenWebUI version 0.3.0 contains a vulnerability in the audio API endpoint `/audio/api/v1/transcriptions` that allows for arbitrary file upload. The application performs insufficient validation on the `file.content_type` and allows user-controlled filenames, leading to a path traversal vulnerability. This can be exploited by an authenticated user to overwrite critical files within the Docker container, potentially leading to remote code execution as the root user.

It is possible to read the advisory at huntr.com. The identification of this vulnerability is CVE-2024-8060 since 08/21/2024. The exploitation is known to be easy. The attack may be initiated remotely. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/16/2025). The attack technique deployed by this issue is T1608.002 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• open-webui

Name

• OpenWebUI

Version

• 0.1
• 0.2
• 0.3.0

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion