PT-2026-39284 · Unknown · Open-Webui

Published 2026-05-08 · Updated 2026-05-19 · CVE-2026-44568

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.0

Description The AccountPending.svelte component renders admin-configured "Pending User Overlay Content" using marked.parse() inside {@html} with an incorrect DOMPurify application order. DOMPurify is applied to the raw Markdown input before it is processed by marked.parse(), allowing an admin to inject arbitrary JavaScript that executes in the browser context of any pending user who views the overlay page. This occurs because marked.parse() can convert Markdown link syntax into HTML tags with javascript: hrefs after the sanitization process has already occurred.

Recommendations Update to version 0.9.0.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-44568

GHSA-FQ3V-XJJX-95RC

Affected Products

Open-Webui

References · 6

• 🔥 https://github.com/open-webui/open-webui/security/advisories/GHSA-fq3v-xjjx-95rc · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-44568 · Security Note
• https://osv.dev/vulnerability/GHSA-fq3v-xjjx-95rc · Vendor Advisory
• https://github.com/open-webui/open-webui · Note
• https://t.me/cveNotify/163961 · Telegram Post
• https://t.me/CVEtracker/53949 · Telegram Post