AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Open WebUIGHSA-gj27-76gq-5v3p

Open WebUI stored cross-site scripting (XSS) vulnerability

Open WebUI

CVE-2024-7990 · Published Mar 20, 2025 · updated Jul 7, 2026

High8.4
No fix yet
GitHub advisory

A stored cross-site scripting (XSS) vulnerability exists in open-webui/open-webui version 0.3.8. The vulnerability is present in the /api/v1/models/add endpoint, where the model description field is improperly sanitized before being rendered in chat. This allows an attacker to inject malicious scripts that can be executed by any user, including administrators, potentially leading to arbitrary code execution.

Affected versions

PackageAffectedFixed in
open-webui
PyPI
<= 0.3.8No fix yet
Details and references
CVSS 3.0
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-79
Also known as
CVE-2024-7990, PYSEC-2026-1734

More Open WebUI advisories

All Open WebUI
High 7.5Mar 20, 2025Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) VulnerabilityGHSA-5ccf-884p-4jjqno fix yetHigh 7.5Mar 20, 2025Open WebUI denial of service through endpoint for converting markdownCVE-2024-7983no fix yetHigh 7.5Mar 20, 2025Open WebUI lacks authentication for the `api/v1/utils/pdf` endpointCVE-2024-8053no fix yetHigh 8.1Mar 20, 2025Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptionsCVE-2024-8060fixed in 0.5.17High 7.6Mar 20, 2025Open WebUI Vulnerable to a Session Fixation AttackCVE-2024-7053no fix yetHigh 7.5Mar 20, 2025Open WebUI Unauthenticated Multipart Boundary Denial of Service (DoS) Vulnerability in api/chat/fileGHSA-6wj5-5pgr-jwq8fixed in 0.4.7