Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the channel webhook create/update flow accepts arbitrary profile_image_url values, including data:image/svg+xml;base64,... payloads. The profile image endpoint then decodes and serves this SVG as image/svg+xml without sanitization, allowing attacker-controlled script handlers (for example onload) to execute when the profile-image URL is opened in the browser. This vulnerability is fixed in 0.9.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-45314 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the channel webhook create/update flow accepts arbi… https://www.cve.org/CVERecord?id=CVE-2026-45314
Post summary
The post notes a flaw in Open WebUI's webhook flow before version 0.9.3 but provides no PoC, exploit, active use, or patch details.
CVE-2026-45314 Stored Cross-Site Scripting in Open WebUI Versions Before 0.9.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45314
Post summary
The entry is a simple disclosure of CVE-2026-45314, identifying it as a stored XSS flaw in Open WebUI versions below 0.9.3, with no accompanying PoC, exploit, or mitigation information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openwebui | open_webui | - | - | - |