CVE-2026-45314

The record

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.3, the channel webhook create/update flow accepts arbitrary profile_image_url values, including data:image/svg+xml;base64,... payloads. The profile image endpoint then decodes and serves this SVG as image/svg+xml without sanitization, allowing attacker-controlled script handlers (for example onload) to execute when the profile-image URL is opened in the browser. This vulnerability is fixed in 0.9.3.

Affected packages

Related vulnerabilities

• CVE-2026-54002 Kirby is an open-source content management system. CWE-87
• CVE-2026-55661 Tina is a headless content management system. CWE-87
• GHSA-2vcc-5v34-9jc8 TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing… CWE-87
• CVE-2026-46492 md-fileserver allows for local viewing of markdown files in a browser. CWE-87
• CVE-2026-25688 Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. CWE-87
• GHSA-32q2-hhr5-6qvv md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed) CWE-87
• CVE-2026-42458 Magento Long Term Support (LTS) is an unofficial, community-driven project provides an… CWE-87
• CVE-2026-42235 n8n is an open source workflow automation platform. CWE-87