Is CVE-2026-45346 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-45346 being exploited in the wild.

How severe is CVE-2026-45346?

Medium severity, with a CVSS score of 4, published 15 May 2026.

Which products and versions are affected?

open-webui (npm) SEMVER:introduced=0,fixed=0.6.31.

Is there a fix for CVE-2026-45346?

Yes. open-webui (npm): upgrade to 0.6.31 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-45346 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-45346?

Check whether you run open-webui (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-45346: Open WebUI stored XSS in SVG renderer

CVE-2026-45346 · Severity: medium · CVSS 4 · Published 2026-05-15

Open WebUI, a popular interface for interacting with large language models, contains a security flaw in how it handles generated images. An attacker can create a conversation containing a malicious image and share it with other users or administrators. If a victim views the shared conversation, the attacker can execute code in their browser to steal sensitive information or take over their account.

Technologies: open-webui (npm). Vendors: npm.

Quick answers

Is CVE-2026-45346 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-45346 being exploited in the wild.
How severe is CVE-2026-45346?: Medium severity, with a CVSS score of 4, published 15 May 2026.
Which products and versions are affected?: open-webui (npm) SEMVER:introduced=0,fixed=0.6.31.
Is there a fix for CVE-2026-45346?: Yes. open-webui (npm): upgrade to 0.6.31 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-45346 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-45346?: Check whether you run open-webui (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

open-webui (npm): upgrade to 0.6.31 or later
```
npm install open-webui@0.6.31
```

Technical details

A stored cross-site scripting (XSS) vulnerability exists in Open WebUI's SVG renderer. The application fails to properly neutralize script-related HTML tags (CWE-80) when processing SVG code within chat threads. An attacker can trigger the generation of an SVG, manually edit the code to include a malicious payload (e.g., an <img> tag with an onerror handler), and save it. When this thread is shared and viewed by another user or administrator, the payload executes in the context of the application domain. This can lead to session hijacking or sensitive data extraction. The issue is fixed in version 0.6.31.

Affected products

Open WebUI open-webui < 0.6.31

Identifiers

CVE-2026-45346
GHSA-r29h-37fj-x2w6

Timeline

2026-05-09: disclosed: Vulnerability reported to vendor
2026-05-14: advisory: GitHub Advisory published
2026-05-14: patched: Fixed in version 0.6.31

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.