CVE-2026-70480

Low

No strong exploitation signal.

CVSS base

4.1 MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

EPSS — probability of exploitation (30 days)

0.2%

9.2th percentile

CISA KEV

Not listed

Weakness / dates

CWE-918

Published 2026-08-04 · modified 2026-09-18

CVSS breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

Attack Vector	N	Network
Attack Complexity	L	Low
Privileges Required	L	Low
User Interaction	R	Required
Scope	C	Changed
Confidentiality	L	Low
Integrity	N	None
Availability	N	None

Timeline

2026-08-04 — Published (NVD)
2026-09-18 — Last modified (NVD)

Description

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.34 until 0.11.0, Open WebUI renders vega and vega-lite fenced code blocks in chat content by building a Vega view in the viewer browser without a restricted resource loader. Any user who can place such a block where another user will see it can make that user browser issue attacker-chosen outbound GET requests and read responses from same-origin or CORS-permissive targets into the rendered page. This issue is fixed in 0.11.0.

Affected

openwebui

References

Official: NVD · CVE.org