References https://cloud.tencent.com/developer/article/2494177 https://github.com/AUTOMATIC1111/stable-diffusion-webui https://huntr.com/repos/automatic1111/stable-diffusion-webui
Related VulnerabilitiesPoCCVE-2026-58123: Hermes WebUI < 0.51.788 - Remote Code ExecutionOpen WebUI /api/v1/retrieval/process/web 服务器端请求伪造漏洞（CVE-2026-70485）PoCNginxWebUI /adminPage/login/getAuth 命令执行漏洞PoCNginxWebUI /Adminpage/Conf/loadOrg 文件读取漏洞NginxWebUI /Api/Nginx/runNginxCmd 命令执行漏洞NginxWebUI /Adminpage/Remote/cmdOver 命令执行漏洞LobeChat /webapi/proxy 服务器端请求伪造漏洞（CVE-2026-54157）Apache Druid /proxy/coordinator@ 服务器端请求伪造漏洞（CVE-2025-27888）PoCCVE-2026-44551: Open WebUI 'LDAP Empty Password' - Authentication BypassPoCCVE-2026-45397: Open WebUI < 0.9.5 - Information DisclosureOpen WebUI /api/v1/retrieval/ 信息泄露漏洞（CVE-2026-45397）Open WebUI存在信息泄露(CVE-2026-45397)Gradio /proxy 服务器端请求伪造漏洞（CVE-2023-34239）