Wingetlywingetly
← All apps

Open WebUI

by Open WebUI Inc.v0.0.20

Last updated

Your AI, right on your desktop. Open WebUI as a native app. Run models locally or connect to any server. No Docker, no terminal, no setup. Download, launch, chat.

Visit homepage

Install with winget

$ winget install --id OpenWebUI.OpenWebUI --exact --version 0.0.20

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for Open WebUI

Open WebUI uses EXE (NSIS). The silent install switches are /S.

One-line silent install (x64, user scope)
open-webui-x64-setup.exe /S

See the full silent install reference for Open WebUI →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

Installers · v0.0.20

ArchitectureTypeScopeInstallDownload
x64EXE
NSIS
userDirect
arm64EXE
NSIS
userDirect

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

  • medium6.5Patched in wingetCVE-2026-88002affects before 0.11.1Sep 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the message-chain reconstruction helper in backend/open_webui/utils/misc.py advanced through a chat history by map key but tracked visited entries using each message bo...

    PatchVendor advisory
  • medium5.0Patched in wingetCVE-2026-88001affects before 0.11.1Sep 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, server-side web fetches did not reapply WEB_FETCH_FILTER_LIST or private-address controls to HTTP redirect destinations when AIOHTTP_CLIENT_ALLOW_REDIRECTS was enabled....

    PatchVendor advisory
  • medium6.5Patched in wingetCVE-2026-88000affects before 0.11.1Sep 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/chats/{id}/messages/{message_id} used the chat-history deletion helper in backend/open_webui/models/chats.py to follow childrenIds without recording vis...

    PatchVendor advisory
  • high8.3Fix in v0.3.14CVE-2026-56400affects before 0.3.14Jul 15, 2026

    open-webui before 0.3.14 contains a cross-origin resource sharing misconfiguration allowing arbitrary origins with allow_origins=* and authenticated requests to the /api/v1/functions endpoint. Attackers can execute arbitrary code on the openwebui instance by crafting malicious c...

    Vendor advisory
  • high7.3Fix in v0.9.5CVE-2026-56398affects before 0.9.5Jul 15, 2026

    Open WebUI before 0.9.5 contains a stored cross-site scripting vulnerability in the OAuth authentication flow where the picture claim URL MIME type is inferred from file extension rather than Content-Type header, allowing SVG files to bypass the profile image validator and be st...

    Vendor advisory
  • high7.7Patched in wingetCVE-2026-59221affects v0.9.6Jul 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 before 0.10.0, _sanitize_proxy_path in backend/open_webui/routers/terminals.py decoded proxy paths only eight times, allowing a nine-times percent-encoded ../ traversal value to pass...

    PatchVendor advisory
  • low3.1Patched in wingetCVE-2026-59715affects before 0.10.0Jul 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.16 before 0.10.0, the Socket.IO server is configured with always_connect=True. The ydoc:awareness:update and ydoc:document:leave Socket.IO handlers accepted collaborative-document even...

    PatchVendor advisory
  • medium4.3Patched in wingetCVE-2026-59227affects before 0.10.0Jul 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.11 before 0.10.0, POST /api/v1/images/edit required only a verified account and did not enforce the global image-edit switch or the per-user image-generation permission, allowing a non...

    PatchVendor advisory
Showing 8 of 25. Source: NVD, updated 4h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

  • O
    Ollama (Portable)Ollama
    Ollama.Ollama.Portablev0.33.1

    Start building with open models.

  • Claude CodeAnthropic PBC
    Anthropic.ClaudeCodev2.1.268

    Unleash Claude’s raw power directly in your terminal. Search million-line codebases instantly. Turn hours-long workflows into a single command. Your tools. Your workflow. Your codebase, evolving at thought speed.

  • CursorAnysphere
    Anysphere.Cursorv3.19.7

    The AI Code Editor

  • LM StudioLM Studio
    ElementLabs.LMStudiov0.4.24+1

    Discover, download, and run local LLMs

  • ClaudeAnthropic, PBC
    Anthropic.Claudev1.44121.2

    Your AI partner on desktop. Fast, focused, and designed for deep work.

  • R
    rtkrtk-ai
    rtk-ai.rtkvv0.48.0

    CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

More from Open WebUI Inc. or browse ai, chatbot, large-language-model.

Frequently asked questions

How do I install Open WebUI on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id OpenWebUI.OpenWebUI --exact --version 0.0.20. winget downloads the installer from Open WebUI Inc. and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install Open WebUI silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id OpenWebUI.OpenWebUI --exact 0.0.20 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
What are the silent install switches for Open WebUI?
Open WebUI uses EXE (NSIS). Run the downloaded installer with: open-webui-x64-setup.exe /S. The silent switches are /S.
How do I uninstall Open WebUI via winget?
Run: winget uninstall --id OpenWebUI.OpenWebUI --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Open WebUI's Apps & Features entry.
Is Open WebUI free?
Open WebUI is distributed under AGPL-3.0. Refer to the publisher (https://openwebui.com/) for the full license terms - Wingetly itself does not charge for installation.
Does Open WebUI work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Open WebUI directly from the publisher.
How do I keep Open WebUI up to date?
Run winget upgrade --id OpenWebUI.OpenWebUI --exact, or winget upgrade --all to update everything winget tracks. We index 10 versions of Open WebUI from microsoft/winget-pkgs.

Recent versions

  • 0.0.20latest
  • 0.0.19
  • 0.0.18
  • 0.0.17
  • 0.0.16
  • 0.0.15
  • 0.0.14
  • 0.0.13
  • 0.0.12
  • 0.0.10