Critical · published March 20, 2025
🚨 An XSS vulnerability in open-webui lets attackers play puppet master with user privileges! 🎭 Picture a sneaky waiter who can overhear your private conversations at a restaurant and even change your order without you knowing. That's what this XSS flaw does—it allows attackers to manipulate a user’s session as if they were the user themselves! If exploited, an attacker could sneak in and steal chat history, delete important messages, or even elevate their account to admin status if the victim holds that power. This could lead to absolutely devastating consequences for the user and the integrity of the entire chat platform.
Picture a sneaky waiter who can overhear your private conversations at a restaurant and even change your order without you knowing. That's what this XSS flaw does—it allows attackers to manipulate a user’s session as if they were the user themselves! The vulnerability in open-webui (versions <= 0.3.8) is due to improper sanitization in the tooltip construction function, allowing injection of malicious scripts that execute within the user’s context.
If exploited, an attacker could sneak in and steal chat history, delete important messages, or even elevate their account to admin status if the victim holds that power. This could lead to absolutely devastating consequences for the user and the integrity of the entire chat platform. Update to open-webui version 0.3.9 immediately to patch this vulnerability. Additionally, review and sanitize user input across all components to prevent future XSS attacks. Implementing Content Security Policy (CSP) can also provide an extra layer of protection. You've got this! Patch up and secure your environment—your users will thank you! 🛡️