Vulnerabilities

Report: Breaking: CVE-2026-44568 - Open WebUI: Stored XSS in Pending User Overlay via Incorrect DOMPurify Applicati...

2026-05-15 0 views admin

CVE ID :CVE-2026-44568 Published : May 15, 2026, 8:16 p.m. | 1 hour, 8 minutes ago Description :Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the AccountPending.svelte component renders the admin-configured

CVE Details

CVE ID

CVE-2026-44568

Published

May 15, 2026

🏷️ Tags

reportbreaking44568webuistoredpendingoverlayincorrectdompurifyapplicati

InfinitSec - Latest Cybersecurity, Technology & Gaming News

Report: Breaking: CVE-2026-44568 - Open WebUI: Stored XSS in Pending User Overlay via Incorrect DOMPurify Applicati...

CVE Details

🏷️ Tags

More from Vulnerabilities

Report: Essential Guide: CVE-2026-45349 - Open WebUI: Broken Access Control for Completions API

Report: - Open WebUI: API key endpoint restrictions bypassed via `x-api-key` header — full... CVE-2026-45339

Report: CVE-2026-44563 - Open WebUI: Ollama Model Access Control Bypass via /api/generate, /api/embed, /a

Report: Ultimate Guide: CVE-2026-44564 - Open WebUI: Read-Only Users Can Modify Collaborative Documents via Socket.IO

Trending

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

CVE-2025-43939: Dell Unity OS Command Injection (High)

Google disputes false claims of massive Gmail data breach

Microsoft: DNS outage impacts Azure and Microsoft 365 services

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting