CVE-2026-45314
HIGH
MEDIUM
Priority: 0.02
BB Relevance:
55/100
Published: 2026-05-15
Modified: 2026-11-11
First seen: 2026-11-11
Status: active
Attack Surface
Network
Low Complexity
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
Low
UI:
Passive
S:
X
AT:
Present
VC:
High
VI:
High
VA:
None
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the channel webhook create/update flow accepts arbitrary profile_image_url values, including data:image/svg+xml;base64,... payloads. The profile image endpoint then decodes and serves this SVG as image/svg+xml without sanitization, allowing attacker-controlled script handlers (for example onload) to execute when the profile-image URL is opened in the browser. This vulnerability is fixed in 0.9.3.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| openwebui | open_webui | < 0.9.3 |
References & Advisories (1)
Exploit
Vendor Advisory