A stored Cross-site Scripting vulnerability in Open WebUI versions prior to 0.6.44 permits authenticated attackers to execute arbitrary scripts in the context of other users, including through shared links.

This vulnerability occurs because the application fails to properly sanitize the embeds property of response messages, leading to a Cross-site Scripting (CWE-79) flaw. An authenticated user can inject malicious scripts that execute within an iFrame due to insecure sandbox configurations, allowing the payload to persist in chat history and propagate to other users via shared chat links.

The exploitation of this vulnerability can lead to unauthorized access to user sessions, data theft, and the potential compromise of sensitive AI-driven interactions within the organization. Given the CVSS score of 7.3, this flaw presents a significant risk to the integrity and confidentiality of the platform, as an attacker could impersonate legitimate users or exfiltrate private chat data across the instance.

Immediate Action: Update the Open WebUI platform to version 0.6.44 or later to resolve the improper iframe sandbox configuration.

Proactive Monitoring: Review audit logs for unusual chat activity or the creation of suspicious shared links that may contain embedded scripts.

Compensating Controls: Implement a strict Content Security Policy (CSP) to restrict script execution and limit the domains from which iFrame content can be loaded.

Public Exploit Available: No (exploit_available: false)

The risk associated with this XSS vulnerability is elevated by its ability to affect multiple users through shared chat functionality. Administrators should prioritize the update to version 0.6.44 immediately to ensure the iframe sandbox is correctly configured and to prevent potential script injection attacks.