A high-severity cross-site scripting vulnerability in Open WebUI allows authenticated attackers to compromise user sessions and perform unauthorized actions through malicious script injection.

This is a stored Cross-Site Scripting (XSS) vulnerability (CWE-79) resulting from improper neutralization of user-supplied input during web page generation. The vulnerability requires the attacker to be authenticated (PR:L) and involves user interaction (UI:R) to execute the malicious payload.

An attacker successfully exploiting this XSS vulnerability could hijack user sessions, steal sensitive information, or perform unauthorized actions on behalf of other users, including administrative accounts. With a CVSS score of 8.7, this flaw poses a substantial risk to data integrity and confidentiality within the AI platform, potentially leading to unauthorized access to proprietary data or AI model configurations.

Immediate Action: Update Open WebUI to version 0.11.0 or later to patch the input sanitization flaw.

Proactive Monitoring: Inspect application logs for unusual request patterns, particularly those involving script tags or unexpected encoded characters in input fields.

Compensating Controls: Ensure that Content Security Policy (CSP) headers are strictly configured to prevent the execution of unauthorized scripts within the browser.

Public Exploit Available: No

Administrators must perform an immediate update to the latest patched version of Open WebUI. Given the potential for session compromise, organizations should also review recent audit logs for any suspicious account activity that may have occurred prior to patching.