CVE-2026-44721
HighSummary
Open WebUI prior to version 0.9.0 contained an XSS vulnerability that allowed authenticated users with model creation permissions to execute arbitrary JavaScript in the browsers of other users, including admins, who viewed the malicious model in the chat UI.
Risk Assessment
This vulnerability could lead to session hijacking and exposure of sensitive data, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade Open WebUI to version 0.9.0 or later to mitigate this vulnerability.
Original NVD description (English source)
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a stored cross-site scripting (XSS) vulnerability that allows any authenticated user with model creation permission (workspace.models) to execute arbitrary JavaScript in the browser of any other user (including admins) who views the malicious model in the chat UI. This vulnerability is fixed in 0.9.0.