CVE-2026-109295 | Open WebUI 0.11.0/0.11.3 File Search grep_knowledge_files/grep_chat_files redos

October 12, 2026 Yanac

A vulnerability classified as problematic has been found in Open WebUI 0.11.0/0.11.3. Affected by this vulnerability is the function grep_knowledge_files/grep_chat_files of the component File Search. Performing a manipulation results in inefficient regular expression complexity.

This vulnerability is reported as CVE-2026-109295. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More