# CVE-2026-45346: Open WebUI stored XSS in SVG renderer

Source: https://junglewise.ai/threats/cve-2026-45346-open-webui-stored-xss-in-svg-renderer  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-15. Updated: 2026-05-19  
License: CC BY 4.0 with a link back

CVE-2026-45346 · Severity: medium · CVSS 4 · Published 2026-05-15

Open WebUI, a popular interface for interacting with large language models, contains a security flaw in how it handles generated images. An attacker can create a conversation containing a malicious image and share it with other users or administrators. If a victim views the shared conversation, the attacker can execute code in their browser to steal sensitive information or take over their account.

Technologies: [open-webui (npm)](https://junglewise.ai/threats/technologies/npm-open-webui). Vendors: [npm](https://junglewise.ai/threats/vendors/npm).

## Quick answers

**Is CVE-2026-45346 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-45346 being exploited in the wild.

**How severe is CVE-2026-45346?** Medium severity, with a CVSS score of 4, published 15 May 2026.

**Which products and versions are affected?** open-webui (npm) SEMVER:introduced=0,fixed=0.6.31.

**Is there a fix for CVE-2026-45346?** Yes. open-webui (npm): upgrade to 0.6.31 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-45346 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-45346?** Check whether you run open-webui (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- open-webui (npm): upgrade to 0.6.31 or later

  ```sh
  npm install open-webui@0.6.31
  ```


## Technical details

A stored cross-site scripting (XSS) vulnerability exists in Open WebUI's SVG renderer. The application fails to properly neutralize script-related HTML tags (CWE-80) when processing SVG code within chat threads. An attacker can trigger the generation of an SVG, manually edit the code to include a malicious payload (e.g., an <img> tag with an onerror handler), and save it. When this thread is shared and viewed by another user or administrator, the payload executes in the context of the application domain. This can lead to session hijacking or sensitive data extraction. The issue is fixed in version 0.6.31.

## Affected products

- Open WebUI open-webui < 0.6.31

## Identifiers

- CVE-2026-45346
- GHSA-r29h-37fj-x2w6

## Timeline

- 2026-05-09: disclosed: Vulnerability reported to vendor
- 2026-05-14: advisory: GitHub Advisory published
- 2026-05-14: patched: Fixed in version 0.6.31

## References

- [https://api.github.com/users/ZoczuS](https://api.github.com/users/ZoczuS)
- [https://github.com/ZoczuS](https://github.com/ZoczuS)
- [https://api.github.com/users/ZoczuS/gists%7B/gist_id%7D](https://api.github.com/users/ZoczuS/gists%7B/gist_id%7D)
- [https://api.github.com/users/ZoczuS/repos](https://api.github.com/users/ZoczuS/repos)
- [https://avatars.githubusercontent.com/u/5016393?v=4](https://avatars.githubusercontent.com/u/5016393?v=4)
- [https://api.github.com/users/ZoczuS/events%7B/privacy%7D](https://api.github.com/users/ZoczuS/events%7B/privacy%7D)

## Related threats

- [PYSEC-2026-1729 - Open WebUI Affected by an External Model Server (Direct Connections) Code Injection via SSE Events](https://junglewise.ai/threats/cve-2025-64496-open-webui-code-injection-via-external-model-server-sse-events)
- [Open WebUI stored DOM XSS in prompts with Rich Text insertion](https://junglewise.ai/threats/cve-2025-64495-open-webui-stored-dom-xss-in-prompts-with-rich-text-insertion)
- [PYSEC-2026-1733 - Open WebUI Uncontrolled Resource Consumption vulnerability](https://junglewise.ai/threats/cve-2024-12534-open-webui-uncontrolled-resource-consumption-in-authentication)
- [PYSEC-2026-1728 - Open WebUI Uncontrolled Resource Consumption vulnerability](https://junglewise.ai/threats/cve-2024-12537-open-webui-uncontrolled-resource-consumption-in-code-format)
- [Open WebUI Stored XSS in Banner component](https://junglewise.ai/threats/cve-2026-45665-open-webui-stored-xss-in-banner-component)