CVE-2024-7033— Arbitrary File Write in open-webui/open-webui
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-7033
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Arbitrary File Write in open-webui/open-webui
Source: NVD (National Vulnerability Database)
Vulnerability Description
In version 0.3.8 of open-webui/open-webui, an arbitrary file write vulnerability exists in the download_model endpoint. When deployed on Windows, the application improperly handles file paths, allowing an attacker to manipulate the file path to write files to arbitrary locations on the server's filesystem. This can result in overwriting critical system or application files, causing denial of service, or potentially achieving remote code execution (RCE). RCE can allow an attacker to execute malicious code with the privileges of the user running the application, leading to a full system compromise.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
路径遍历：’..filename’
Source: NVD (National Vulnerability Database)
Vulnerability Title
Open WebUI 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Open WebUI是Open WebUI开源的一个可扩展、功能丰富、用户友好的自托管 WebUI。 Open WebUI 0.3.8版本存在安全漏洞，该漏洞源于download_model端点处理文件路径不当，可能导致任意文件写入。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| open-webui | open-webui/open-webui | unspecified ~ latest | - |
II. Public POCs for CVE-2024-7033
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-7033
请登录查看更多情报信息。
Same Patch Batch · open-webui · 2025-03-20 · 20 CVEs total
| CVE-2024-7046 | Improper Access Control in open-webui/open-webui | |
| CVE-2024-8053 | Improper Authentication in open-webui/open-webui | |
| CVE-2024-8017 | Cross-site Scripting (XSS) in open-webui/open-webui | |
| CVE-2024-8060 | Remote Code Execution in OpenWebUI via Arbitrary File Upload | |
| CVE-2024-7990 | Stored Cross-Site Scripting in open-webui/open-webui | |
| CVE-2024-7043 | Improper Access Control in open-webui/open-webui | |
| CVE-2024-7983 | Denial of Service in open-webui/open-webui | |
| CVE-2024-7035 | Cross-Site Request Forgery (CSRF) in open-webui/open-webui | |
| CVE-2024-7053 | Session Fixation in open-webui/open-webui | |
| CVE-2024-7806 | Remote Code Execution by Non-Admin Users via CSRF in open-webui/open-webui | |
| CVE-2024-12534 | Denial of Service (DoS) in open-webui/open-webui | |
| CVE-2024-7036 | Denial of Service in open-webui/open-webui | |
| CVE-2024-7044 | Stored XSS in open-webui/open-webui | |
| CVE-2024-7040 | Improper Access Control in open-webui/open-webui | |
| CVE-2024-7045 | Improper Access Control in open-webui/open-webui | |
| CVE-2024-7959 | SSRF in open-webui/open-webui | |
| CVE-2024-7034 | Remote Code Execution due to Arbitrary File Write in open-webui/open-webui | |
| CVE-2024-7039 | Improper Privilege Management in open-webui/open-webui | |
| CVE-2024-12537 | Unauthenticated Denial of Service in open-webui/open-webui |
IV. Related Vulnerabilities
Same product: open-webui/open-webui
- CVE-2024-8017
Cross-site Scripting (XSS) in open-webui/open-webui - CVE-2024-7053
Session Fixation in open-webui/open-webui - CVE-2024-8053
Improper Authentication in open-webui/open-webui - CVE-2024-7806
Remote Code Execution by Non-Admin Users via CSRF in open-we - CVE-2024-7039
Improper Privilege Management in open-webui/open-webui
Same vendor: open-webui
- CVE-2026-45338
Open WebUI: SSRF via OAuth Profile Picture URL in _process_p - CVE-2026-44549
Open WebUI: Stored XSS in excel file preview - CVE-2026-45299
Open WebUI: Stored Cross-Site Scripting In Profile Picture - CVE-2026-45665
Open WebUI: Stored XSS in Banner Component via Improper Sani - CVE-2026-45667
Open WebUI: Unauthenticated endpoint can trigger embedding g
Same weakness: CWE-29
V. Comments for CVE-2024-7033
No comments yet