An authenticated vulnerability in the Open WebUI platform could allow attackers to perform Cross-site Scripting and UI manipulation, potentially leading to unauthorized actions within the application.

This issue encompasses CWE-79 and CWE-1021, involving improper neutralization of input and insufficient restriction of UI layers. These vulnerabilities require the attacker to possess low-level privileges (authenticated) to trigger the malicious payload.

Successful exploitation allows an attacker to inject scripts that execute in the context of a user session, leading to potential data theft, session hijacking, or unauthorized interface interactions. With a CVSS score of 8.2, this vulnerability represents a significant risk to the integrity and confidentiality of the AI platform, especially in environments where users trust the generated output.

Immediate Action: Upgrade open-webui to version 0.11.0 or later to incorporate the security patches provided by the vendor.

Proactive Monitoring: Monitor application logs for suspicious script injections or unusual UI-related behavior originating from authenticated user accounts.

Compensating Controls: Implement a Content Security Policy (CSP) to restrict the execution of unauthorized scripts and utilize a Web Application Firewall (WAF) to filter malicious input patterns.

Public Exploit Available: No

The vulnerabilities identified in Open WebUI present a high risk to organizational data and platform integrity. Administrators should prioritize the update to version 0.11.0 to ensure these security flaws are fully remediated and to prevent potential unauthorized access or script execution.