Report: CVE-2026-45346 - Open WebUI: Stored Cross-Site Scripting in SVG Renderer

Report: CVE-2026-45346 - Open WebUI: Stored Cross-Site Scripting in SVG Renderer

CVE ID :CVE-2026-45346 Published : May 15, 2026, 10:16 p.m. | 1 hour, 9 minutes ago Description :Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer implementation. This vulnerability is fixed in 0.6.31. Severity: 5.1 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
May 15, 2026