{
 "id": "AIR-2026-0634",
 "slug": "cve-2026-44721-open-webui-vulnerable-to-stored-xss-via-model",
 "title": "CVE-2026-44721: Open WebUI Vulnerable to Stored XSS via Model Description",
 "summary": "A stored XSS vulnerability exists in Open WebUI where markdown links with javascript URIs bypass content sanitizers within model descriptions. The vendor released an advisory addressing the flaw without reported exploitation.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-05-08",
 "incident_date_precision": "day",
 "first_reported": "2026-05-08",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-gf5m-wcrh-7928",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-44721: open-webui Vulnerable to Stored XSS via Model Description",
   "published_at": "2026-05-08"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44721",
   "publisher": "NVD",
   "title": "CVE-2026-44721: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.",
   "published_at": "2026-05-15"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-44721",
  "xss",
  "open-webui"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}