EXPOSURE Open WebUI
SEVERITY HIGH
PROBE GET :8080/api/config
Is your Open WebUI exposed?
Chat UI exposed: conversation history visible, open signup lets strangers use your models.
Scan a host you own → Fix card Census
Why it matters
Your chat UI — including conversation history and any connected models — is reachable by anyone. If open signup is enabled, strangers can register their own accounts and use your models at your expense.
How common is it?
3,114 Open WebUI instances are reachable in the Shodan index. Fingerprint match, not a verified zero-auth count · src: Shodan count · `http.favicon.hash:1239683376` · 2026-08
Counts are population-level, from third-party indexes and my own honeypots. I never scan the internet and this page makes no claim about any specific host.
Fix it
The full walkthrough lives on the fix card, kept current in one place: