{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/open-webui-0.6.33---0.11.3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:open-webui:open-webui:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-109286"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Open WebUI (0.7.0 \u003c= 0.11.3)","Open WebUI (0.6.33 - 0.11.3)"],"_cs_severities":["high"],"_cs_tags":["web-vulnerability","cross-origin","authentication-bypass","api-security"],"_cs_type":"advisory","_cs_vendors":["Open WebUI"],"content_html":"\u003cp\u003eOpen WebUI versions 0.7.0 through 0.11.3 are vulnerable to a cross-origin message handling flaw in the SyncStatsModal component. The application fails to validate the origin or content of incoming postMessage events, specifically those targeting the SyncStatsModal. An attacker can craft a malicious website that sends an unvalidated 'verify:chat' message to a user currently authenticated to the Open WebUI instance. By supplying a path-traversal chat ID within this message, the attacker redirects the application's authenticated stats export request to the /auths endpoint. This interaction causes the application to export the victim's session JSON Web Token (JWT) back to the attacker-controlled origin, facilitating full unauthorized API access to the victim's account. This vulnerability poses a significant risk to organizations relying on Open WebUI for internal AI chat services.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for full account takeover of authenticated users. An attacker gaining the session JWT can perform any action the user is authorized to perform, including reading chat history, accessing LLM configurations, and modifying system settings. This risk is particularly high for enterprise deployments where users may have elevated privileges or access to sensitive internal documents.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Open WebUI to version 0.11.4 or later immediately.\u003c/li\u003e\n\u003cli\u003eReview access logs for unusual patterns of API access originating from unfamiliar origins or non-standard user-agent strings.\u003c/li\u003e\n\u003cli\u003ePatch CVE-2026-109286 on all internet-facing or internal-facing instances as the highest priority.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-12T18:34:36Z","date_published":"2026-10-12T18:34:25Z","id":"https://feed.craftedsignal.io/briefs/2026-10-open-webui-cve-2026-109286/","summary":"Open WebUI versions 0.7.0 through 0.11.3 contain a cross-origin message handling vulnerability that allows unauthenticated websites to steal a user's session JWT via a crafted postMessage payload.","title":"Cross-Origin Message Handling Vulnerability in Open WebUI","url":"https://feed.craftedsignal.io/briefs/2026-10-open-webui-cve-2026-109286/"}],"language":"en","title":"CraftedSignal Threat Feed - Open WebUI (0.6.33 - 0.11.3)","version":"https://jsonfeed.org/version/1.1"}