CVE-2026-54013— Open WebUI 存储型XSS致账户接管漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-54013の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Open WebUI: Stored XSS to Account Takeover via Model Profile Images in Open WebUI
ソース: NVD (National Vulnerability Database)
脆弱性説明
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, Open WebUI patched SVG XSS in user profile images and webhook profile images but forgot to apply the same fix to model profile images. The ModelMeta class has no validate_profile_image_url field validator, and the model image serving endpoint has no MIME allowlist or nosniff header. Any authenticated user with workspace.models permission (enabled by default) can store a data:image/svg+xml;base64,... payload in a model's profile image and achieve full account takeover of anyone who navigates to the image URL. This vulnerability is fixed in 0.9.6.
ソース: NVD (National Vulnerability Database)
CVSS情報
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
ソース: NVD (National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| open-webui | open-webui | < 0.9.6 | - |
II. CVE-2026-54013の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-54013のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-54013 其他参考 (1)
Same Patch Batch · open-webui · 2026-06-23 · 15 CVEs total
| CVE-2026-54011 | 8.7 HIGH | Open WebUI: Stored XSS in Mermaid Markdown Preview |
| CVE-2026-54008 | 8.5 HIGH | Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` |
| CVE-2026-54010 | 8.3 HIGH | Open WebUI: Forged chat-file link allows cross-user file read and deletion |
| CVE-2026-54018 | 7.7 HIGH | Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects |
| CVE-2026-54012 | 7.1 HIGH | Open WebUI: Forged model meta.knowledge allows cross-user file read and deletion |
| CVE-2026-54009 | 6.5 MEDIUM | Open WebUI: Cross-user file disclosure via /api/chat/completions image_url field |
| CVE-2026-54019 | 6.5 MEDIUM | Open WebUI: RAG ACL Bypass in Milvus Multitenancy Mode |
| CVE-2026-54015 | 6.4 MEDIUM | Open WebUI: Prompt history IDOR: unbound history_id allows cross-prompt read and deletion |
| CVE-2026-54021 | 6.3 MEDIUM | Open WebUI: Authenticated users can target arbitrary configured Ollama backends via unguar |
| CVE-2026-54022 | 5.3 MEDIUM | Open WebUI: Any authenticated user can read other users' private notes via Socket.IO |
| CVE-2026-54016 | 4.3 MEDIUM | Open WebUI: Open WebUI BOLA: `search_knowledge_files` Allows Unauthorized Knowledge Base F |
| CVE-2026-54006 | 4.3 MEDIUM | Open WebUI: Calendar event re-parenting allows writing events into another user's calendar |
| CVE-2026-54014 | 4.3 MEDIUM | Open WebUI: Sibling-Prefix Path Traversal via /cache/{path} in open-webui/open-webui |
| CVE-2026-54007 | Open WebUI: Cross-origin postMessage confirmation bypass via action:submit |
IV. 関連脆弱性
同じ製品: open-webui
- CVE-2026-54007
Open WebUI: Cross-origin postMessage confirmation bypass via - CVE-2026-54006
Open WebUI: Calendar event re-parenting allows writing event - CVE-2026-54008
Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_ - CVE-2026-54009
Open WebUI: Cross-user file disclosure via /api/chat/complet - CVE-2026-54010
Open WebUI: Forged chat-file link allows cross-user file rea
同じベンダー: open-webui
- CVE-2026-54007
Open WebUI: Cross-origin postMessage confirmation bypass via - CVE-2026-54006
Open WebUI: Calendar event re-parenting allows writing event - CVE-2026-54008
Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_ - CVE-2026-54009
Open WebUI: Cross-user file disclosure via /api/chat/complet - CVE-2026-54010
Open WebUI: Forged chat-file link allows cross-user file rea
同じ弱点: CWE-79
- CVE-2026-57656
WordPress Hester Core plugin <= 1.1.8 - Cross Site Scripting - CVE-2026-57651
WordPress Ghost Kit plugin <= 3.6.0 - Cross Site Scripting ( - CVE-2026-57650
WordPress Magazine Blocks plugin <= 1.8.3 - Cross Site Scrip - CVE-2026-57638
WordPress Fluent Booking plugin <= 2.1.0 - Cross Site Script - CVE-2026-57629
WordPress StatCounter plugin <= 2.1.1 - Cross Site Scripting
V. CVE-2026-54013へのコメント
まだコメントはありません