Open WebUI versions prior to 0.6.37 are vulnerable to stored cross-site scripting, which can lead to session hijacking and unauthorized account access for both administrators and regular users.

This is a stored cross-site scripting (CWE-79) vulnerability within the Notes PDF download functionality. It allows an authenticated or unauthenticated attacker to inject malicious SVG tags into Markdown files, which execute arbitrary JavaScript in the context of a victim's session.

The ability to execute arbitrary JavaScript allows an attacker to steal session tokens, effectively bypassing authentication mechanisms. Given the High CVSS score of 8.7, this represents a significant risk of full account takeover, which could lead to unauthorized data access, manipulation of AI models, or administrative compromise of the platform.

Immediate Action: Update the Open WebUI platform to version 0.6.37 or later immediately to incorporate the necessary input sanitization.

Proactive Monitoring: Review web application logs for suspicious file imports or unusual patterns in user session activity that may indicate token theft attempts.

Compensating Controls: Implement a robust Content Security Policy (CSP) to restrict the execution of inline scripts and prevent the loading of unauthorized resources from external domains.

Public Exploit Available: No (exploit_available unknown).

Due to the severity of this vulnerability and the potential for total account compromise, organizations utilizing Open WebUI must prioritize the application of the 0.6.37 update. Failure to remediate this flaw exposes the entire platform to session hijacking and persistent unauthorized access by malicious actors.