NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-45346
Summary

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.31, there is a Cross-Site Scripting vulnerability in Open WebUI SVG renderer implementation. This vulnerability is fixed in 0.6.31.

Publication Date May 16, 2026, 7:16 a.m.
Registration Date May 17, 2026, 4:13 a.m.
Last Update May 16, 2026, 7:16 a.m.
Related information, measures and tools
Common Vulnerabilities List