Horizon Alert
Summary of the vulnerability and why it matters
This vulnerability in Open WebUI allows an unauthenticated user to upload files to any location on the server's filesystem. This is a significant risk because it can lead to the compromise of the entire server.
- Allows unrestricted file uploads.
- Affects servers reachable from the internet.
- Enables full system takeover.
Attack Path
How an attacker could exploit the issue
An unauthenticated attacker can leverage this vulnerability to upload arbitrary files to the server by crafting a malicious filename that escapes the intended upload directory. This allows them to overwrite critical system files or inject malicious content anywhere the web server process has write permissions, potentially leading to complete system compromise.
- Upload file to server.
- Bypass directory restrictions.
- Execute arbitrary code.
Live Threat
Current exploitation, exposure, and threat context
This vulnerability, allowing arbitrary file writes to any location on the filesystem accessible by the web server user, presents a serious risk. The lack of authentication and validation on file uploads makes it a prime target for attackers seeking to gain a foothold in a system. While the product is designed for offline use, misconfigurations or intentional exposure could lead to exploitation.
- No public exploit observed.
- No KEV listing.
- Recency signal weak.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
Focus on updating Open WebUI to version 0.1.124 or later to address the critical path traversal vulnerability. If immediate patching is not feasible, implement strict network segmentation to isolate affected instances and monitor for any unusual file system activity or unauthorized access attempts.
- Upgrade to version 0.1.124+.
- Restrict network access to affected instances.
- Monitor for unauthorized file modifications.
