huntr / Protect AI accepted Open WebUI's disputes and withdrew
CVE-2024-7040, -7959, -7039, -7038, -7034 and -7033. All six are now in
the REJECTED state on cve.org, which propagates to NVD and downstream
feeds.
Mark them as CNA REJECTED in the Official Resolution column, add an
Official Resolution row and the withdrawal to the timeline on each
disposition page, and replace the dispute-pending wording with the
resolved outcome. CVE-2024-7040 also gains the Root's routing of the
dispute to the CNA under Program Rule 4.1 and the CNA's acceptance.
The three ZDI records remain in progress and are unchanged.
The user/session headers under ENABLE_FORWARD_USER_INFO_HEADERS did not
mention that each connection can also forward arbitrary custom headers
whose values embed template placeholders substituted per request
({{MESSAGE_ID}}, {{CHAT_ID}}, {{USER_EMAIL}}, {{USER_AGENT}}, file and
task placeholders, and more). Add a section covering how to set them
(Admin Panel > Settings > Connections, or the connection headers object
in OPENAI_API_CONFIGS / OLLAMA_API_CONFIGS), the full placeholder list,
where they apply, and that they work independently of
ENABLE_FORWARD_USER_INFO_HEADERS and take precedence over the built-in
forwarded headers.
The selected suggestion row and matched terms fall back to
--ifm-color-primary, which is #ddd in dark mode, leaving forced white text
on a light grey row. Set the search plugin's own colour variables for dark
mode instead: white marks on the dark dropdown and an inverted selected row
(white background, near-black text).
Swap docusaurus-lunr-search for @easyops-cn/docusaurus-search-local. All
query words are now required to match instead of being OR-ed, so a page
spamming one common word no longer outranks the page containing the whole
query. Underscore-joined names like CONTEXT_COMPACTION_TOKEN_CAP are
indexed both whole and as sub-words, matched terms are highlighted on the
target page, and a full results page is available at /search.
Add an exact-match layer on top (src/client/exactSearch.js, wired via
webpack module replacement). Multi-word or quoted queries that occur
verbatim on a page always rank first, rendered as a single marked phrase
with a section-anchor deep link, with token-based results following. A
SearchBar wrapper (src/theme/SearchBar) highlights exactly the searched
sentence on the target page and scrolls it into view, replacing the
per-word highlight parameters for these results.
Also mention the Builtin Tools capability name on the tools page so the
in-product term is findable by search.
Adds an Agentic Application Risks accepted-risk page for the OWASP Top 10 for Agentic Applications, framed like the LLM Output Unpredictability page: the catalogued behaviours are risks inherent to autonomous, tool-using systems rather than classical vulnerabilities, bounded by gated permissions, per-user privilege limits and isolated execution, and in scope only when chained with a concrete platform flaw. Cross-links it with the LLM page. Also expands the authentication timing page (GHSA link, fix summary, and the accepted residual bounded by physical and runtime limits), adds an OWASP LLM Top 10 acknowledgement to the LLM page summary, and documents the primary administrator, what it is and how to swap it generically, on the Roles page.
Publishes rejected, out-of-scope dispositions for CVE-2024-7033, 7034, 7038, 7039 and 7959. All are admin-gated endpoints in the reported version (v0.3.8) and today, verified against the code. Each explains why the behaviour is out of scope: admin actions (Rule 9), intended Tools and Functions execution (Rule 10), inflated PR:L severity on 7039 and 7959 (Rule 8), and the CVE-2025-29446 precedent for the OpenAI-URL SSRF in 7959. Each carries a timeline recording the disposition's publication and the dispute raised with the issuing CNA. The index gains a Vendor Disposition column label and an Official Resolution column (withdrawn records shown as a badge), with row order matching the sidebar.
Updates the CVE-2026-0765, 0766 and 0767 timelines: records that on 2026-07-06 the CVE Program forwarded the dispute to the issuing CNA (ZDI) for its determination under the record-dispute procedure, that neither ZDI nor the CVE Program responded to the earlier 2026-05-04 dispute, and that Open WebUI's original closure of each report gave the reporter no written explanation at the time, which was a mistake on Open WebUI's part. Drops the "despite the vendor's out-of-scope disposition" note on publication, since no written disposition was issued to the reporter.
Timothy Jaeryang Baek