High severity7.3NVD Advisory· Published Feb 19, 2026· Updated Jun 17, 2026
CVE-2026-26192
CVE-2026-26192
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.7.0, aanually modifying chat history allows setting the html property within document metadata. This causes the frontend to enter a code path that treats document contents as HTML, and render them in an iFrame when the citation is previewed. This allows stored XSS via a weaponized document payload in a chat. The payload also executes when the citation is viewed on a shared chat. Version 0.7.0 fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
open-webuiPyPI | < 0.7.0 | 0.7.0 |
Affected products
3cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*range: <0.7.0
- (no CPE)range: <0.7.0
- (no CPE)range: < 0.7.0
Patches
Vulnerability mechanics
References
4- github.com/open-webui/open-webui/security/advisories/GHSA-xc8p-9rr6-97r2nvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-xc8p-9rr6-97r2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-26192ghsaADVISORY
- github.com/open-webui/open-webui/blob/6f1486ffd0cb288d0e21f41845361924e0d742b3/src/lib/components/chat/Messages/Citations/CitationModal.sveltenvdProductWEB
News mentions
0No linked articles in our index yet.