Medium severity4.3OSV Advisory· Published Dec 4, 2025· Updated Jun 17, 2026
CVE-2025-63681
CVE-2025-63681
Description
open-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ directly accesses and cancels tasks without verifying user ownership, enabling attackers (a normal user) to stop arbitrary LLM response tasks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
open-webuiPyPI | <= 0.6.33 | — |
Affected products
3v0.1.102, v0.1.103, v0.1.104, …+ 1 more
- (no CPE)range: v0.1.102, v0.1.103, v0.1.104, …
- cpe:2.3:a:openwebui:open_webui:0.6.41:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- github.com/TOAST-Research/pocs/blob/main/openwebui/arbitirary_task_stop/report.mdnvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-frv8-gffc-37pxghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-63681ghsaADVISORY
- github.com/open-webui/open-webui/blob/46ae3f4f5d7d4d706041bdae4ad2d802e568712b/backend/open_webui/main.pynvdProductWEB
News mentions
0No linked articles in our index yet.