CVE-2026-26193
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.44, aanually modifying chat history allows setting the embeds property on a response message, the content of which is loaded into an iFrame with a sandbox that has allow-scripts and allow-same-origin set, ignoring the "iframe Sandbox Allow Same Origin" configuration. This enables stored XSS on the affected chat. This also triggers when the chat is in the shared format. The result is a shareable link containing the payload that can be distributed to any other users on the instance. Version 0.6.44 fixes the issue.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
open-webuiPyPI | < 0.6.44 | 0.6.44 |
Affected products
3cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*range: <0.6.44
- (no CPE)range: <0.6.44
- (no CPE)range: < 0.6.44
Patches
Vulnerability mechanics
References
4- github.com/open-webui/open-webui/security/advisories/GHSA-vjm7-m4xh-7wrcnvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-vjm7-m4xh-7wrcghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-26193ghsaADVISORY
- github.com/open-webui/open-webui/blob/6f1486ffd0cb288d0e21f41845361924e0d742b3/src/lib/components/chat/Messages/ResponseMessage.sveltenvdProductWEB
News mentions
0No linked articles in our index yet.