CVE-2025-46571: Open WebUI allows limited stored XSS vila uploaded html file
Low privileged users can upload HTML files which contain JavaScript code via the /api/v1/files/ backend endpoint. This endpoint returns a file id, which can be used to open the file in the browser and trigger the JavaScript code in the user’s browser. Under the default settings, files uploaded by low-privileged users can only be viewed by admins or themselves, limiting the impact of this vulnerability.
References
- github.com/advisories/GHSA-8gh5-qqh8-hq3x
- github.com/open-webui/open-webui/blob/main/backend/open_webui/routers/files.py
- github.com/open-webui/open-webui/commit/ef2aeb7c0eb976bac759e59ac359c94a5b8dc7e0
- github.com/open-webui/open-webui/releases/tag/v0.6.6
- github.com/open-webui/open-webui/security/advisories/GHSA-8gh5-qqh8-hq3x
- nvd.nist.gov/vuln/detail/CVE-2025-46571
Code Behaviors & Features
Detect and mitigate CVE-2025-46571 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →