Securaity Browse advisories
SA-26-613 High

Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding…

Open WebUI

More for Open WebUI RSS feed for Open WebUI

Severity
High, CVSS 8.7
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Record
CVE-2026-87995
Affects
Open WebUI
Known exploited
Not listed in the CISA Known Exploited Vulnerabilities catalog
Published
Record first published by the source
September 9, 2026
Source last modified
September 16, 2026

Description

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.11 until 0.11.1, src/lib/components/chat/FileNav/PortPreview.svelte rendered terminal port content in an iframe sandbox containing both allow-scripts and allow-same-origin. Because the terminal proxy serves that content from the Open WebUI origin, an authenticated user with access to a shared terminal server could host script on a previewed port and take over a victim's account when the victim opened the preview. This issue is fixed in version 0.11.1.

Description quoted from the NVD record.

Who is affected

This flaw affects Open WebUI, a self-hosted chat program for using AI models, in versions 0.8.11 up to, but not including, 0.11.1. The problem is in the preview feature that shows content from a shared terminal server. Someone who has a login and access to a shared terminal server could place harmful code in content shown in that preview. When another user opens the preview, the attacker could take over that user's account. This flaw is rated High.

What to do

  1. The person who installed or runs Open WebUI for your organization should check which version is in use. Versions 0.8.11 up to, but not including, 0.11.1 have this flaw.
  2. If you are on an affected version, update Open WebUI to version 0.11.1, which fixes this flaw, or to any later release.
  3. If an IT provider or vendor runs Open WebUI for your organization, send them this advisory and ask when the update to 0.11.1 will be done.
  4. After the update, check that Open WebUI reports version 0.11.1 or later.

Analysis written from the source record as of September 16, 2026 and reviewed before publishing.

Sources

MORE ADVISORIES

See all