https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 06 Aug 2026 16:39:16 +0000 https://vulnerability.circl.lu/sighting/e0e08d51-b01d-460d-b402-47abdd85e002/export {"uuid": "e0e08d51-b01d-460d-b402-47abdd85e002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70492", "type": "seen", "source": "https://gist.github.com/alon710/63aaf77a9f4550ada3647ec00940f1b7", "content": "# CVE-2026-70492: CVE-2026-70492: Stored Cross-Site Scripting (XSS) via Unescaped KaTeX Render-Error Fallback in Open WebUI\n\n> **CVSS Score:** 8.7\n> **Published:** 2026-08-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-70492\n\n## Summary\nCVE-2026-70492 (also tracked as GHSA-pwxh-7358-jq2x) is a stored Cross-Site Scripting (XSS) vulnerability in Open WebUI versions 0.10.0 through 0.10.x. The flaw arises because engine-level JavaScript stack overflow errors escape KaTeX standard error handling. Svelte's fallback rendering path assigns the raw, unescaped mathematical input string directly to the DOM using the unsafe {@html} directive, enabling arbitrary client-side code execution. This allows attackers to steal session tokens and perform unauthorized administrative actions when users view malicious messages. The vulnerability has been fully resolved in version 0.11.0.\n\n## TL;DR\nA stored XSS vulnerability in Open WebUI (v0.10.0 to <0.11.0) allows authenticated attackers to execute arbitrary JavaScript in user sessions by forcing a call stack limit error in KaTeX, bypassing error handling and triggering an unescaped HTML fallback rendering path.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.7 (High)\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n- **Vulnerability Class**: Stored Cross-Site Scripting (XSS)\n\n## Affected Systems\n\n- Open WebUI\n- **open-webui**: >= 0.10.0, < 0.11.0 (Fixed in: `0.11.0`)\n\n## Mitigation\n\n- Upgrade Open WebUI to version 0.11.0 or higher.\n- Implement Web Application Firewall (WAF) rules to inspect and block inputs with excessively nested structures in mathematical blocks.\n- Manually escape HTML input in Svelte rendering fallback logic if immediate patching is unavailable.\n\n**Remediation Steps:**\n1. Check the current Open WebUI version through the administration panel or via the deployed container image tag.\n2. Obtain the updated release package or container image corresponding to version 0.11.0 or higher.\n3. Rebuild or redeploy the application service to apply the updated KatexRenderer component configurations.\n4. Audit chat and channel database records for historical payloads containing nested braces paired with HTML event triggers.\n\n## References\n\n- [GitHub Advisory GHSA-pwxh-7358-jq2x](https://github.com/open-webui/open-webui/security/advisories/GHSA-pwxh-7358-jq2x)\n- [GitHub Pull Request #26718](https://github.com/open-webui/open-webui/pull/26718)\n- [GitHub Security Fix Commit](https://github.com/open-webui/open-webui/commit/bc600d3f085802c45aa8f38c30e6e8c986bde6cc)\n- [Open WebUI v0.11.0 Release Changelog](https://github.com/open-webui/open-webui/releases/tag/v0.11.0)\n- [CVE-2026-70492 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-70492)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-70492) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-05T13:31:17.824768Z"} {"uuid": "e0e08d51-b01d-460d-b402-47abdd85e002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70492", "type": "seen", "source": "https://gist.github.com/alon710/63aaf77a9f4550ada3647ec00940f1b7", "content": "# CVE-2026-70492: CVE-2026-70492: Stored Cross-Site Scripting (XSS) via Unescaped KaTeX Render-Error Fallback in Open WebUI\n\n> **CVSS Score:** 8.7\n> **Published:** 2026-08-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-70492\n\n## Summary\nCVE-2026-70492 (also tracked as GHSA-pwxh-7358-jq2x) is a stored Cross-Site Scripting (XSS) vulnerability in Open WebUI versions 0.10.0 through 0.10.x. The flaw arises because engine-level JavaScript stack overflow errors escape KaTeX standard error handling. Svelte's fallback rendering path assigns the raw, unescaped mathematical input string directly to the DOM using the unsafe {@html} directive, enabling arbitrary client-side code execution. This allows attackers to steal session tokens and perform unauthorized administrative actions when users view malicious messages. The vulnerability has been fully resolved in version 0.11.0.\n\n## TL;DR\nA stored XSS vulnerability in Open WebUI (v0.10.0 to <0.11.0) allows authenticated attackers to execute arbitrary JavaScript in user sessions by forcing a call stack limit error in KaTeX, bypassing error handling and triggering an unescaped HTML fallback rendering path.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-79\n- **Attack Vector**: Network (AV:N)\n- **CVSS v3.1 Score**: 8.7 (High)\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n- **Vulnerability Class**: Stored Cross-Site Scripting (XSS)\n\n## Affected Systems\n\n- Open WebUI\n- **open-webui**: >= 0.10.0, < 0.11.0 (Fixed in: `0.11.0`)\n\n## Mitigation\n\n- Upgrade Open WebUI to version 0.11.0 or higher.\n- Implement Web Application Firewall (WAF) rules to inspect and block inputs with excessively nested structures in mathematical blocks.\n- Manually escape HTML input in Svelte rendering fallback logic if immediate patching is unavailable.\n\n**Remediation Steps:**\n1. Check the current Open WebUI version through the administration panel or via the deployed container image tag.\n2. Obtain the updated release package or container image corresponding to version 0.11.0 or higher.\n3. Rebuild or redeploy the application service to apply the updated KatexRenderer component configurations.\n4. Audit chat and channel database records for historical payloads containing nested braces paired with HTML event triggers.\n\n## References\n\n- [GitHub Advisory GHSA-pwxh-7358-jq2x](https://github.com/open-webui/open-webui/security/advisories/GHSA-pwxh-7358-jq2x)\n- [GitHub Pull Request #26718](https://github.com/open-webui/open-webui/pull/26718)\n- [GitHub Security Fix Commit](https://github.com/open-webui/open-webui/commit/bc600d3f085802c45aa8f38c30e6e8c986bde6cc)\n- [Open WebUI v0.11.0 Release Changelog](https://github.com/open-webui/open-webui/releases/tag/v0.11.0)\n- [CVE-2026-70492 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-70492)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-70492) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-05T13:31:17.824768Z"} https://vulnerability.circl.lu/sighting/e0e08d51-b01d-460d-b402-47abdd85e002/export Wed, 05 Aug 2026 13:31:17 +0000 https://vulnerability.circl.lu/sighting/be62a70b-b48c-4a7c-82a8-5548e4de96ae/export {"uuid": "be62a70b-b48c-4a7c-82a8-5548e4de96ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70492", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-pwxh-7358-jq2x", "content": "", "creation_timestamp": "2026-08-04T22:35:08.196411Z"} {"uuid": "be62a70b-b48c-4a7c-82a8-5548e4de96ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70492", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-pwxh-7358-jq2x", "content": "", "creation_timestamp": "2026-08-04T22:35:08.196411Z"} https://vulnerability.circl.lu/sighting/be62a70b-b48c-4a7c-82a8-5548e4de96ae/export Tue, 04 Aug 2026 22:35:08 +0000 https://vulnerability.circl.lu/sighting/f75940be-a6fe-4b3b-843b-285f0dbff041/export {"uuid": "f75940be-a6fe-4b3b-843b-285f0dbff041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70492", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bzto3ybcv52fo", "content": "CVE-2026-70492 - Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages\nCVE ID : CVE-2026-70492\n \n Published : Aug. 4, 2026, 9:16 p.m. | 30\u00a0minutes ago\n \n Description : Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI p...", "creation_timestamp": "2026-08-04T21:55:37.437408Z"} {"uuid": "f75940be-a6fe-4b3b-843b-285f0dbff041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70492", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bzto3ybcv52fo", "content": "CVE-2026-70492 - Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages\nCVE ID : CVE-2026-70492\n \n Published : Aug. 4, 2026, 9:16 p.m. | 30\u00a0minutes ago\n \n Description : Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI p...", "creation_timestamp": "2026-08-04T21:55:37.437408Z"} https://vulnerability.circl.lu/sighting/f75940be-a6fe-4b3b-843b-285f0dbff041/export Tue, 04 Aug 2026 21:55:37 +0000