PT-2026-41167 · Unknown · Open-Webui
CVE-2026-45314
·
Published
2026-05-09
·
Updated
2026-07-13
CVSS v4.0
7.4
High
| Vector | AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Open WebUI versions prior to 0.9.3
Description
The channel webhook create and update flow accepts arbitrary
profile image url values, including base64-encoded SVG payloads. The endpoint '/api/v1/channels/webhooks/{webhook id}/profile/image' decodes and serves these SVGs as 'image/svg+xml' without sanitization. This allows attacker-controlled script handlers, such as onload, to execute in the application origin when the URL is opened in a browser, resulting in stored Cross-Site Scripting (XSS). This can lead to the exfiltration of session tokens or API keys and unauthorized actions performed on behalf of the victim.Recommendations
Update to version 0.9.3.
As a temporary workaround, restrict access to the '/api/v1/channels/webhooks/{webhook id}/profile/image' endpoint or avoid using the
profile image url parameter in webhook configurations until the update is applied.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Open-Webui