CVE-2026-109300

Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled iframes. Authenticated users can post crafted channel messages...

CVE-2026-109300 Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds

Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled iframes. Authenticated users can post crafted channel messages...

EUVD-2026-97594

Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal...

CVE-2026-109292

The Open WebUI software (versions 0.6.27 before 0.11.4 ) is vulnerable to an information disclosure flaw. During OAuth-mode connections , the application may send the full browser cookie jar to destination servers. This allows operators of OpenAI-compatible connections , OpenAPI tool servers , or...

CVE-2026-109292 Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections

Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal...

CVE-2026-109292 Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections

Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal...

CVE-2026-109292

Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal...

CVE-2026-109292 Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections

Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal...

CVE-2026-109290 Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview

Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing...

EUVD-2026-97592

Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing...

CVE-2026-109290

Open WebUI versions 0.11.1 before 0.11.4 are susceptible to a stored cross-site scripting (XSS) vulnerability in the DocxPreview.svelte component. An authenticated attacker can execute arbitrary scripts by uploading a specially crafted DOCX attachment containing an OOXML altChunk HTML part or a s...

CVE-2026-109290 Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview

Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing...

CVE-2026-109290

Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing...

CVE-2026-109290 Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview

Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing...

EUVD-2026-97588

Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated...

CVE-2026-109286

Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated...

CVE-2026-109286

Versions of Open WebUI from 0.7.0 before 0.11.4 are vulnerable to a cross-origin message handling flaw in the SyncStatsModal component. This vulnerability, categorized as an Origin Validation Error (CWE-346) , allows an attacker-controlled website to steal a signed-in user's session token by post...

CVE-2026-109286 Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal

Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated...

CVE-2026-109286 Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal

Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated...

CVE-2026-109286 Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal

Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated...