PT-2026-50479 · Unknown · Open-Webui
CVSS v4.0
7.1
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Open WebUI versions prior to 0.9.6
Description
The chat message listener in the chat page's window message listener processes
input:prompt and action:submit messages without enforcing same-origin restrictions. This allows an external site to set prompt text and trigger the submitPrompt() function in an authenticated victim session. An attacker can use a cross-origin page to auto-post messages, resulting in unauthorized requests to the 'POST /api/v1/chats/new' and 'POST /api/chat/completions' endpoints. This enables cross-site forced actions and the execution of models or tools under the victim's privileges without their consent.Recommendations
Update to version 0.9.6.
Exploit
Fix
Origin Validation Error
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Open-Webui