CVE-2026-109298 — Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex
Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unboun…
Published: 2026-10-12 · CVSS: 7.1 · CVSS 4.0
Open WebUI 0.11.0 before 0.11.4 compiles user-chosen grep patterns for its knowledge and chat file search tools with a regex engine that expands nested counted repetition unbounded at compile time and caches the result. Authenticated users can have the model call grep_knowledge_files with short nested-repetition patterns, blocking the event loop and exhausting worker memory.
Source: CVE Program · Revision 2bc2f154a9513fd639cf69e09a5cddfaedf57bdc