CVE-2026-45346

Published: May 15, 2026

Modified: May 18, 2026

PUBLISHED

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer implementation. This vulnerability is fixed in 0.6.31.

Vendor	Product	Versions
open-webui	open-webui	affected `< 0.6.31`

Weaknesses (CWE)

CWE-80

References

https://github.com/open-webui/open-webui/security/advisories/GHSA-r29h-37fj-x2w6

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2026-45346

Description

Affected Products

Weaknesses (CWE)

References