Loading the catalogue…
Chat UIs · Open WebUI, Inc. · US
Open WebUI
US CLOUD Act exposureOpen WebUI License (custom)
USAGE ON STAV · LAST 12 WEEKS
Where Open WebUI shows up on Stav.
Live usage rolls up every five minutes. We surface the 12-week trend once enough requests have flowed through this app.
STAV REVIEW · LAST REVIEWED 06/21/2026
“Strong Sovereign posture for self-hosted Inference, but 93 open security advisories — including an unresolved critical authentication bypass — demand disciplined patch ops.”
Good for
- Teams that need a full-featured AI chat interface where prompts and completions never leave operator-controlled infrastructure
- Organisations routing Inference through Stav to a local or self-hosted backend and wanting SSO, RBAC, and audit logging out of the box
- Air-gapped or on-premises deployments requiring Docker or pip install with no mandatory vendor call-home
- Operators who can commit to a ≤14-day patching cadence and want a project with a proven nine-day release rhythm
Watch out for
- An unresolved critical LDAP empty-password authentication bypass (CVE-2026-44551, open since May 2026) enables full account compromise — disable LDAP or network-isolate any LDAP-enabled instance until a confirmed patch is running
- The advisory backlog hit 93 total CVEs/GHSAs as of June 2026, with 30 published in a single day (2026-06-11), covering stored XSS, SSRF, IDOR, path traversal, and RAG ACL bypass — systemic access-control weaknesses, not isolated defects
- The custom Open WebUI Licence requires a paid enterprise licence for any deployment serving more than 50 users that modifies branding — get legal sign-off before approving at scale
- Development is heavily concentrated on a single founder-contributor; no SBOM, signed binaries, bug bounty, SOC 2, ISO 27001, or DPA has been published
Editorial assessment, not legal advice. Stav's risk ratings, scores, and verdicts are our own analysis of publicly available information and may be incomplete or out of date. Verify independently before making compliance or procurement decisions.
MODEL REQUIREMENTS
What Open WebUI needs from a model.
Required
- Streaming
Recommended
- Document understanding
- Long context (≥128k)
- Structured output
- Tool calling
- Vision input
Known issues8 open
Public security, privacy and governance advisories that are still open. Each row carries a source link — these are factual claims, not editorial judgements.
2026-06-30
lowUpstream change on open-webui: github_release 'v0.9.6' → 'v0.10.1', github_last_push '2026-06-22T22:25:22Z' → '2026-06-30T02:31:50Z', cve_count 93 → 98
other · open
Source ↗2026-06-23
lowUpstream change on open-webui: github_last_push '2026-06-16T02:00:47Z' → '2026-06-22T22:25:22Z'
other · open
Source ↗2026-06-16
lowUpstream change on open-webui: github_last_push '2026-06-08T21:52:55Z' → '2026-06-16T02:00:47Z', cve_count 77 → 93
other · open
Source ↗2026-06-09
lowUpstream change on open-webui: github_last_push '2026-06-02T02:22:06Z' → '2026-06-08T21:52:55Z'
other · open
Source ↗2026-06-02
lowUpstream change on open-webui: github_release 'v0.9.5' → 'v0.9.6', github_last_push '2026-05-15T00:34:23Z' → '2026-06-02T02:22:06Z'
other · open