CVE-2025-63681 Details
Description
open-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ directly accesses and cancels tasks without verifying user ownership, enabling attackers (a normal user) to stop arbitrary LLM response tasks.
A vulnerability in Open-WebUI version 0.6.33 allows authenticated users to cancel tasks initiated by others, including those started by Admin accounts. The issue arises from an unprotected API endpoint that stops tasks without verifying user ownership or permissions. This flaw can disrupt ongoing processes and potentially lead to a broader denial-of-service condition on the application.
To address this vulnerability, implement checks to ensure that only task owners or users with specific privileges can cancel tasks. Additionally, restrict the task listing endpoint to return only tasks owned by the requesting user, unless the requester is an Admin or has broader permissions. It is also recommended to add unit tests for the task cancellation endpoint to verify ownership and permission controls.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Dec 5, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/TOAST-Research/pocs/blob/main/openwebui/arbitirary_task_stop/report.md | CISA-ADP | ExploitThird Party Advisory |
| https://github.com/open-webui/open-webui/blob/46ae3f4f5d7d4d706041bdae4ad2d802e568712b/backend/open_webui/main.py#L1652 | [email protected] | Product |
| https://github.com/TOAST-Research/pocs/blob/main/openwebui/arbitirary_task_stop/report.md | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
| CWE-284 | Improper Access Control | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | 0.6.41 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Dec 5, 2025 | CVE Modified | CISA-ADP |
| Dec 5, 2025 | Initial Analysis | [email protected] |
| Dec 4, 2025 | New CVE Received | [email protected] |