Case open-webui-cybernews-compromisedLLMjackingWorldwide
Cybernews: 45 of 98 unauthenticated Open WebUI servers already running miners and stealers
Cybernews researchers found 98 Open WebUI servers with authentication disabled and over 2,000 allowing open sign-up; 45 of the unauthenticated hosts carried a cryptominer and infostealer operation seen in 14 variants with Discord webhook alerts.
HighAttack on AIStatus: OngoingVerified case file
Open in the interactive mapCite this case
- Reported
- Mar 18, 2026
- Location
- Worldwide
- Target
- Exposed Open WebUI instances
- Severity
- High
- Triggered by
- Unknown
- Actor type
- Criminal
- Reported loss
- None reported
- CVE
- None
What happened
Cybernews researchers found 98 Open WebUI servers with authentication disabled and over 2,000 allowing open sign-up; 45 of the unauthenticated hosts carried a cryptominer and infostealer operation seen in 14 variants with Discord webhook alerts.
Impact: Nearly half of unauthenticated servers compromised for mining and data theft; attackers gained access to chats, uploaded documents and connected model keys
Who triggered it
Actor: Unknown
Attribution: Single malware source tracked through 14 versions; operator not identified
Motive: Cryptomining and credential theft
How it happened
Attack vector: Open WebUI instances with authentication off or open registration; payloads hidden by repeated byte reversal, base64 and zlib layers
Root cause: Operators disabling authentication or leaving sign-up open on internet-facing AI chat front ends; two undocumented API routes lacking access control
Timeline
- Cybernews publishes the scan: 98 unauthenticated instances, 45 compromised, 2,000 plus with open registration
- Two information disclosure flaws reported to Open WebUI Inc.; report closed without response
Response
No vendor response reported; researchers urged enabling authentication and restricting registration
Current status: Ongoing
Sources (open in a new tab)
- Compare the Cloud comparethecloud.net
- Sysdig (earlier Open WebUI case) sysdig.com
Cite this case
Cybernews: 45 of 98 unauthenticated Open WebUI servers already running miners and stealers. AI Threat Watch, case open-webui-cybernews-compromised, Mar 18, 2026. https://aithreat.io/cases/open-webui-cybernews-compromised/
Permanent link: https://aithreat.io/cases/open-webui-cybernews-compromised/