{
 "id": "AIR-2026-0799",
 "slug": "cve-2026-26192-open-webui-stored-xss-via-citation-document-m",
 "title": "CVE-2026-26192: Open WebUI stored XSS via citation document metadata",
 "summary": "Manually modified chat history can inject HTML properties into document metadata in Open WebUI. This causes citation previews to render document contents as HTML in an iFrame, triggering stored XSS.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-07-07",
 "incident_date_precision": "day",
 "first_reported": "2026-02-19",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26192",
   "publisher": "NVD",
   "title": "CVE-2026-26192: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.",
   "published_at": "2026-02-19"
  },
  {
   "url": "https://github.com/advisories/GHSA-xc8p-9rr6-97r2",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-26192: Open WebUI vulnerable to Stored XSS via iFrame in citations model",
   "published_at": "2026-07-07"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-26192",
  "xss"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}