Week 45, updated 2 Nov 2026

Local AI Open WebUI

Is Open WebUI safe?

Short answer: Caution. StackGrade's weekly scan of open-webui/open-webui gives it a Caution label for 13 critical-severity known vulnerabilities in runtime dependencies (OSV). It does list 76 high-severity advisories in runtime dependencies, which don't change the label. Critical advisories are counted once per package; a known issue in a locked package version does not prove Open WebUI is exploitable in your setup. Automated scan of commit f7ac7ee on 2 Nov 2026, not a manual audit.

Updated : the last week its score, rank or safety result changed.

Self-hosted ChatGPT-style web interface for Ollama and OpenAI-compatible APIs.

  • 157,502 stars
  • pushed 2 Nov
  • Open WebUI License
  • Python

github.com/open-webui/open-webui · openwebui.com

68score out of 100

#8of 52 overall#3in Local AI▼ 4 vs Week 44

  • Maintenance 30%55
  • Adoption 30%80
  • Docs 20%69
  • Community 20%–
W42W43W44W45

Score over the last 4 weeks: 69, 68, 72, 68.

Caution

13 critical-severity known vulnerabilities in runtime dependencies (OSV).

How this score works

Each part is a percentile among all 52 tracked tools, so 50 is average for this list. Community is not measured yet; the score uses the other 80%.

  • Maintenance: Last push 2 Nov 2026. Last 10 GitHub releases within 64 days (about 4.2 per 30 days), latest release 29 Oct 2026. Issue close time: fewer than 5 closed issues, so not used.
  • Adoption: 157,502 stars (70%), 22,903 forks (30%).
  • Docs: README 18,189 characters, 19 headings, 11 code blocks, install section: yes.

Methodology

#3 of 5 in Local AI

Ranked by score. The yellow row is this tool.

Local AI, Week 45score 0–100, safety
  1. 1Ollama#2 overall73Caution
  2. 2LobeHub#7 overall69Caution
  3. 3Open WebUI#8 overall68Caution
  4. 4llama.cpp#9 overall68Caution
  5. 5vLLM#24 overall54Caution

Safety scan, 2 Nov 2026

Automated scan of commit f7ac7ee, 544 files. Not a manual audit.

Caution

  • 13Critical dependency advisories76 high, 48 medium, 6 low. OSV, runtime dependencies only.
  • 0Install hooksNo npm install scripts found.
  • 0Remote-code patternsFor example eval(fetch(…)).
  • 1Agent files checked0 phrases flagged for review.
  • 1curl | sh installersIn docs or program code. Information only.
Why this label?

Why this label:

  • 13 critical-severity known vulnerabilities in runtime dependencies (OSV)

Known vulnerabilities in runtime dependencies (OSV): 13 critical, 76 high, 48 medium, 6 low, 5 unrated

  • pyjwt@2.13.0 (PYSEC-2026-4145) in backend/requirements-slim.txt
  • authlib@1.7.2 (PYSEC-2026-4355) in backend/requirements-slim.txt
  • authlib@1.7.2 (PYSEC-2026-4356) in backend/requirements-slim.txt
  • authlib@1.7.2 (GHSA-6v38-4h7w-rj9h) in backend/requirements-slim.txt
  • certifi@2026.7.22 (PYSEC-2026-4320) in backend/requirements-slim.txt

Also found (informational, does not change the label):

  • 76 high-severity known vulnerabilities in runtime dependencies (OSV)
  • Documents curl|sh style installer (1 occurrence, e.g. Dockerfile)
  • Critical advisories counted once per package: 27 matches across 3 lockfiles

Notes:

  • 14 affected packages only in dev/test/docs manifests, not counted
  • Telemetry/analytics references in code: telemetry

Automated scan of commit f7ac7ee on 2 Nov 2026, not a manual audit. 544 files checked. What we check

Repo activity

From the GitHub API, fetched 2 Nov 2026.

  • 10+Releases, 90 daysLatest v0.12.5, 29 Oct
  • –Median issue closeFewer than 5 closed issues
  • 158kStars+735 since 26 Oct
  • 22.9kForks165 open issues
  • 2023Repo created6 Oct 2023
30 days ago2 Nov
6 releases in the last 30 days, one mark each (GitHub releases feed, last 10 entries).

6 releases in the last 30 days (GitHub releases feed, last 10 entries):

Questions about Open WebUI

Answers use this week's StackGrade data.

Is Open WebUI safe to use?

Caution. StackGrade's weekly scan of open-webui/open-webui gives it a Caution label for 13 critical-severity known vulnerabilities in runtime dependencies (OSV). It does list 76 high-severity advisories in runtime dependencies, which don't change the label. Critical advisories are counted once per package; a known issue in a locked package version does not prove Open WebUI is exploitable in your setup. Automated scan of commit f7ac7ee on 2 Nov 2026, not a manual audit.

How does StackGrade score Open WebUI?

Open WebUI scores 68 out of 100 in Week 45: #8 of 52 tracked tools overall and #3 in Local AI. The score combines maintenance (55), adoption (80) and docs (69) as percentiles among all 52 tracked tools; community (20% weight) is not measured yet, so the score uses the other 80%. It is not a hands-on test and it is separate from the safety label.

What are the alternatives to Open WebUI?

The highest-scored other tools in Local AI this week: Ollama (73, Caution), LobeHub (69, Caution), llama.cpp (68, Caution), vLLM (54, Caution). StackGrade has not tested them hands-on.

What licence does Open WebUI use?

The licence listed for open-webui/open-webui is Open WebUI License. Read the licence text before commercial use.

Compare and use it

All facts and sources
Type
AI tool
License
Open WebUI License
Language
Python
Created
6 Oct 2023
Owner
open-webui (Organization)
Forks
22,903

GitHub description: “User-friendly AI Interface (Supports Ollama, OpenAI API, ...)”

Sources: github.com/open-webui/open-webui, api.github.com/repos/open-webui/open-webui, raw.githubusercontent.com/open-webui/open-webui/main/README.. Fetched 2 Nov 2026.

Know when Open WebUI changes label

One email a week: the new top 10, the biggest score changes and every safety label that changed.

Free. Double opt-in: you confirm by email first, unsubscribe in one click.