CVE-2026-26193
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.44, aanually modifying chat history allows setting the `embeds` property on a response message, the content of which is loaded into an iFrame with a sandbox that has `allow-scripts` and `allow-same-origin` set, ignoring the "iframe Sandbox Allow Same Origin" configuration. This enables stored XSS on the affected chat. This also triggers when the chat is in the shared format. The result is a shareable link containing the payload that can be distributed to any other users on the instance. Version 0.6.44 fixes the issue.
How to fix
- openwebui open_webui0.6.44 or later
- open-webui0.6.44 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openwebui open_webui | v < 0.6.44 | 0.6.44 |
| open-webuiPyPI | v < 0.6.44 | 0.6.44 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.