CVE-2025-46571: Open WebUI vulnerable to limited stored XSS vila uploaded html file
First published: Mon May 05 2025(Updated: )
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, low privileged users can upload HTML files which contain JavaScript code via the `/api/v1/files/` backend endpoint. This endpoint returns a file id, which can be used to open the file in the browser and trigger the JavaScript code in the user's browser. Under the default settings, files uploaded by low-privileged users can only be viewed by admins or themselves, limiting the impact of this vulnerability. A link to such a file can be sent to an admin, and if clicked, will give the low-privileged user complete control over the admin's account, ultimately enabling RCE via functions. Version 0.6.6 contains a fix for the issue.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Open WebUI | <0.6.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-46571?
CVE-2025-46571 has a medium severity due to the potential for low privileged users to upload malicious HTML files.
How do I fix CVE-2025-46571?
To fix CVE-2025-46571, upgrade Open WebUI to version 0.6.6 or later.
What versions of Open WebUI are affected by CVE-2025-46571?
Open WebUI versions prior to 0.6.6 are affected by CVE-2025-46571.
What kind of attack can CVE-2025-46571 enable?
CVE-2025-46571 can enable cross-site scripting (XSS) attacks by allowing the upload of HTML files containing JavaScript code.
Are there any workarounds for CVE-2025-46571?
A potential workaround is to restrict file uploads to trusted users until an upgrade to version 0.6.6 can be performed.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/author
- agent/severity
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/open webui
- canonical/open webui