CyberRota Analysis
AI-GeneratedThe Open WebUI platform versions 0.9.0 to 0.11.0 are vulnerable due to improper iframe permissions, allowing authenticated users to execute scripts from previewed HTML files. This vulnerability can lead to account takeover by accessing session tokens and potentially enable server-side code execution if the victim has elevated privileges. Organizations using affected versions should prioritize upgrading to version 0.11.0 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, the terminal file-preview serveUrl iframe branch always granted allow-same-origin together with allow-scripts for HTML files served from the application origin. Any authenticated user with access to a configured terminal server could cause script in a previewed file to run in the Open WebUI origin, read the victim's session token from localStorage, and take over the account, with possible server-side code execution if the victim was an admin or held workspace.functions. This issue is fixed in 0.11.0.