Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer implementation. This vulnerability is fixed in 0.6.31.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-45346 Cross-Site Scripting Vulnerability in Open WebUI SVG Renderer Before 0.6.31 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45346
Post summary
The post announces a new XSS vulnerability in Open WebUI’s SVG renderer affecting all versions prior to 0.6.31, but provides no details on exploits, patches, or active use.
CVE-2026-45346 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in O… https://www.cve.org/CVERecord?id=CVE-2026-45346
Post summary
The tweet reports CVE-2026-45346 as a cross‑site scripting flaw in Open WebUI prior to version 0.6.31, but provides no PoC, exploit code, patch details, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openwebui | open_webui | - | - | - |