Wingetlywingetly
← All apps
O

Open CoreUI

by xxnuov0.9.6

Last updated

Open CoreUI - A rewritten Open WebUI in Rust, significantly reducing memory and resource usage, requiring no dependency services, no Docker, with both a server version and a Tauri-based desktop client. (formerly Open WebUI Lite)

Install with winget

$ winget install --id xxnuo.OpenCoreUI --exact --version 0.9.6

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

From $49/month. No credit card required.

Not on Intune? Pckgr RMM deploys and patches apps like this one on any Windows fleet. Free for up to 5 devices.

About

Open CoreUI, a lightweight implementation of Open WebUI

Features

- A desktop client with a single executable download to get started

- Use original frontend

- No Docker, Python, PostgreSQL, Redis dependencies required

- Lower memory footprint compared to original version (much lower)

- Lower hardware requirements compared to original version

- Better performance with Rust backend server compared to original version

Installers · v0.9.6

ArchitectureTypeScopeInstallDownload
x64Portable-Direct
arm64Portable-Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

  • medium6.5Fix in v0.11.1CVE-2026-88006affects before 0.11.1Sep 10, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback r...

  • medium6.5Patched in wingetCVE-2026-88005affects before 0.9.0Sep 10, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.9.0, Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without applying the email domain allowlist that the normal OAuth login callback...

  • medium6.5Fix in v0.11.1CVE-2026-88002affects before 0.11.1Sep 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.5.0 until 0.11.1, the message-chain reconstruction helper in backend/open_webui/utils/misc.py advanced through a chat history by map key but tracked visited entries using each message bo...

  • medium5.0Fix in v0.11.1CVE-2026-88001affects before 0.11.1Sep 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 until 0.11.1, server-side web fetches did not reapply WEB_FETCH_FILTER_LIST or private-address controls to HTTP redirect destinations when AIOHTTP_CLIENT_ALLOW_REDIRECTS was enabled....

  • medium6.5Patched in wingetCVE-2026-88000affects before 0.11.1Sep 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/chats/{id}/messages/{message_id} used the chat-history deletion helper in backend/open_webui/models/chats.py to follow childrenIds without recording vis...

  • high7.1Fix in v0.11.1CVE-2026-87999affects before 0.11.1Sep 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/open_webui/retrieval/web/utils.py treated Python's globally routable address classif...

  • high7.1Patched in wingetCVE-2026-87998affects before 0.11.1Sep 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, DELETE /api/v1/knowledge/{id}/delete in backend/open_webui/routers/knowledge.py authorized deletion against the knowledge base but then removed its administrator-owned...

  • medium4.3Patched in wingetCVE-2026-87997affects before 0.11.1Sep 9, 2026

    Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.1, POST /api/chat/completions and POST /api/v1/chat/completions in backend/open_webui/main.py copied a client-supplied folder_id into a new chat without applying the fold...

Showing 8 of 25. Source: NVD, updated 1h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Not on Intune? Patch it with Pckgr RMM, free for up to 5 devices.

Related apps

  • Claude CodeAnthropic PBC
    Anthropic.ClaudeCodev2.1.302

    Unleash Claude’s raw power directly in your terminal. Search million-line codebases instantly. Turn hours-long workflows into a single command. Your tools. Your workflow. Your codebase, evolving at thought speed.

  • O
    Ollama (Portable)Ollama
    Ollama.Ollama.Portablev0.40.8

    Start building with open models.

  • ClaudeAnthropic, PBC
    Anthropic.Claudev2.42304.2

    Your AI partner on desktop. Fast, focused, and designed for deep work.

  • CursorAnysphere
    Anysphere.Cursorv3.19.7

    The AI Code Editor

  • LM StudioLM Studio
    ElementLabs.LMStudiov0.4.26+4

    Discover, download, and run local LLMs

  • R
    rtkrtk-ai
    rtk-ai.rtkv1.0.1

    CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies

More from xxnuo or browse ai, chatbot, large-language-model.

Frequently asked questions

How do I install Open CoreUI on Windows?
Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id xxnuo.OpenCoreUI --exact --version 0.9.6. winget downloads the installer from xxnuo and runs it. Requires Windows 10 (1809+) or Windows 11.
How do I install Open CoreUI silently for unattended deployment?
Add --silent and accept the agreements upfront: winget install --id xxnuo.OpenCoreUI --exact 0.9.6 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.
How do I uninstall Open CoreUI via winget?
Run: winget uninstall --id xxnuo.OpenCoreUI --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from Open CoreUI's Apps & Features entry.
Is Open CoreUI free?
Open CoreUI is distributed under Apache-2.0. Refer to the publisher (https://github.com/xxnuo/open-coreui) for the full license terms - Wingetly itself does not charge for installation.
Does Open CoreUI work on Windows 10?
Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls Open CoreUI directly from the publisher.
How do I keep Open CoreUI up to date?
Run winget upgrade --id xxnuo.OpenCoreUI --exact, or winget upgrade --all to update everything winget tracks. We index 1 version of Open CoreUI from microsoft/winget-pkgs.