OpenWebUI in the Media

Multiple OpenWebUI AI servers infected with cryptominers and infostealers stayed up for over a year

Almost 100 OpenWebUI instances had no authentication, leaving them open to abuse by anyone.

OpenWebUI Servers Targeted in Attacks Using AI Payloads to Steal Data

A recent campaign has targeted improperly secured Open WebUI systems, allowing threat actors to deploy malicious artificial intelligence payloads. Open WebUI is a highly popular self-hosted interface designed to enhance large language models. Shodan scans reveal over 17,000 active instances…

Malicious campaign targeting vulnerable OpenWebUI servers: technical analysis

GitHub star tool OpenWebUI hijacked by hackers to steal money