Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions

🗓️ 07 Jul 2026 16:50:59Reported by GitHub Advisory DatabaseType

Stored XSS in MarkdownTokens.svelte enables HTML in chat, risking token theft and possible RCE.

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2025-46719	5 May 202520:16	–	circl
CNNVD	Open WebUI 跨站脚本漏洞	5 May 202500:00	–	cnnvd
CVE	CVE-2025-46719	5 May 202518:50	–	cve
Cvelist	CVE-2025-46719 Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions	5 May 202518:50	–	cvelist
EUVD	EUVD-2025-13498	7 Jul 202616:50	–	euvd
NVD	CVE-2025-46719	5 May 202519:15	–	nvd
OSV	CVE-2025-46719 Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions	5 May 202518:50	–	osv
OSV	GHSA-9F4F-JV96-8766 Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions	7 Jul 202616:50	–	osv
OSV	PYSEC-2026-2716 Open WebUI vulnerable to stored XSS via unescaped markdown token in MarkdownTokens.svelte leading to full account takeover and RCE via functions	13 Jul 202615:46	–	osv
Positive Technologies	PT-2025-19787	5 May 202500:00	–	ptsecurity

Vulners

Node

open-webuiRange<0.6.6pip

Source	Link
github	www.github.com/open-webui/open-webui/security/advisories/GHSA-9f4f-jv96-8766
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-46719
github	www.github.com/open-webui/open-webui/commit/6fd082d55ffaf6eb226efdeebc7155e3693d2d01
github	www.github.com/open-webui/open-webui/blob/main/src/lib/components/chat/Messages/Markdown/MarkdownTokens.svelte
github	www.github.com/open-webui/open-webui/releases/tag/v0.6.6
github	www.github.com/advisories/GHSA-9f4f-jv96-8766

07 Jul 2026 16:51Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.15.4

CVSS 46.4

EPSS0.00485

SSVC