MEDIUM 6.5 GitHub
CVE-2026-70493
Open WebUI: Any authenticated user can stall a worker via a knowledge-search pattern that backtracks catastrophically
## Summary
The built-in knowledge search tools let a chat participant choose the pattern used to grep knowledge files. Patterns containing regex metacharacters were compiled with Python's backtracking `re` engine and run against every line of every reachable file, with no time limit anywhere on that path. A single crafted pattern and a single short line of matching text pin one CPU core for as long as the attacker wants, and because the search runs synchronously inside the event loop, that worke
Affected Products
- pip/open-webui >= 0.9.6, < 0.11.0
References
- https://github.com/advisories/GHSA-2f54-p244-32q6
- https://github.com/open-webui/open-webui/security/advisories/GHSA-2f54-p244-32q6
- https://github.com/open-webui/open-webui/pull/27471
- https://github.com/open-webui/open-webui/commit/3ab2026262ef6f09810e4d235c5f9a9cb903e595
This medium severity vulnerability with a CVSS score of 6.5 was published on 2026-08-04 via GitHub. Affected: pip/open-webui >= 0.9.6, < 0.11.0.
vulnfeed aggregates 9214 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.