All vulnerabilities
CVE-2024-6706GHSA-5jp3-wp5v-5363PYSEC-2026-1722

open-webui: Open WebUI Stored Cross-Site Scripting Vulnerability

Open WebUI open-webuipipLibraries & packages
Open in ThreatlineRecord JSON
CVSS
5.1Medium
ExploitationPublic exploit codeCISA's assessment says proof of concept code is public, assessed 8 Aug 2024. Not in the KEV catalogCISA via CVE List
Exploit odds (EPSS)0.66%Chance of exploitation activity in the next 30 days, higher than 51% of CVEs. Scored 26 Oct 2026FIRST EPSS
Fixed in0.3.14Fixed versionGitHub
Published7 Aug 2024Updated 26 Oct 2026CVE List

What fixes it

  • 0.3.14open-webui, pipGitHub
  • 0.3.14open-webui, PyPIOSVpip install "open-webui>=0.3.14"

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Attackers can craft a malicious prompt that coerces the language model into executing arbitrary JavaScript in the context of the web page.

Text from CVE List

Affected versions 24

  • open-webui, pip< 0.3.14GitHub
  • Open WebUIaffected: 0.1.105CVE List
  • open-webui, PyPIfrom first release, fixed in 0.3.14OSV
  • open-webui, PyPI0.1.124OSV
  • open-webui, PyPI0.1.125OSV
  • open-webui, PyPI0.2.0OSV
  • open-webui, PyPI0.2.1OSV
  • open-webui, PyPI0.2.2OSV
  • open-webui, PyPI0.2.3OSV
  • open-webui, PyPI0.2.4OSV
  • open-webui, PyPI0.2.5OSV
  • open-webui, PyPI0.3.0OSV
  • open-webui, PyPI0.3.1OSV
  • open-webui, PyPI0.3.10OSV
  • open-webui, PyPI0.3.12OSV
  • open-webui, PyPI0.3.13OSV
  • open-webui, PyPI0.3.2OSV
  • open-webui, PyPI0.3.3OSV
  • open-webui, PyPI0.3.4OSV
  • open-webui, PyPI0.3.5OSV
  • open-webui, PyPI0.3.6OSV
  • open-webui, PyPI0.3.7OSV
  • open-webui, PyPI0.3.8OSV
  • open-webui, PyPI0.3.9OSV

References 5