Open-WebUI up to 0.6.32 Endpoint /api/config improper authentication 🚫 [False Positive]

Noticeinfo

⚠️ This issue seems to be a false positive. Please check the referenced sources and consider omitting this entry entirely.

Productinfo

Name

• Open-WebUI

Version

• 0.6.0
• 0.6.1
• 0.6.2
• 0.6.3
• 0.6.4
• 0.6.5
• 0.6.6
• 0.6.7
• 0.6.8
• 0.6.9
• 0.6.10
• 0.6.11
• 0.6.12
• 0.6.13
• 0.6.14
• 0.6.15
• 0.6.16
• 0.6.17
• 0.6.18
• 0.6.19
• 0.6.20
• 0.6.21
• 0.6.22
• 0.6.23
• 0.6.24
• 0.6.25
• 0.6.26
• 0.6.27
• 0.6.28
• 0.6.29
• 0.6.30
• 0.6.31
• 0.6.32

Website

• Product: https://github.com/open-webui/open-webui/

Timelineinfo

10/27/2025 CVE reserved
12/18/2025 +52 days Advisory disclosed
12/18/2025 +0 days VulDB entry created
06/29/2026 +193 days VulDB entry last update

Sourcesinfo

Product: github.com

Advisory: github.com
False Positive: Yes

CVE: CVE-2025-63391 (🔒)
GCVE (CVE): GCVE-0-2025-63391
GCVE (VulDB): GCVE-100-337401

Entryinfo

Created: 12/18/2025 17:26
Updated: 06/29/2026 23:57
Changes: 12/18/2025 17:26 (53), 06/29/2026 23:57 (3)
Complete: 🔍
Cache ID: 216::103

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion

Want to stay up to date on a daily basis?

Enable the mail alert feature now!