Wandb
6 CVEs across 2 Wandb products. Browse Wandb vulnerabilities, severities, and proof-of-concept exploits.
Wandb products with known CVEs
Wandb CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-4995 | Low | 3.5 | 2026-03-28 | A vulnerability was determined in wandb OpenUI up to 1.0. Affected by this vulnerability is an unknown functionality of the file frontend/public/annotator/inde… |
CVE-2026-4994 | Low | 3.5 | 2026-03-28 | A vulnerability was found in wandb OpenUI up to 1.0/3.5-turb. Affected is the function generic_exception_handler of the file backend/openui/server.py of the co… |
CVE-2026-4993 | Low | 3.3 | 2026-03-28 | A vulnerability has been found in wandb OpenUI up to 0.0.0.0/1.0. This impacts an unknown function of the file backend/openui/config.py. The manipulation of th… |
CVE-2026-4992 | Medium | 4.3 | 2026-03-27 | A flaw has been found in wandb OpenUI up to 1.0. This affects the function create_share/get_share of the file backend/openui/server.py of the component HTMLAnn… |
CVE-2025-0192 | Medium | 5.4 | 2025-03-20 | A stored Cross-site Scripting (XSS) vulnerability exists in the latest version of wandb/openui. The vulnerability is present in the edit HTML functionality, wh… |
CVE-2024-10649 | Medium | 6.1 | 2025-02-10 | wandb/openui latest commit c945bb859979659add5f490a874140ad17c56a5d contains a vulnerability where unauthenticated endpoints allow file uploads and downloads f… |