{
 "id": "AIR-2026-0929",
 "slug": "cve-2026-87995-open-webui-xss-via-terminal-port-preview-ifra",
 "title": "CVE-2026-87995: Open WebUI XSS via terminal port-preview iframe sandbox misconfiguration",
 "summary": "An overly permissive iframe sandbox in Open WebUI allowed scripts from terminal port previews to access the application origin, enabling session token theft. Patches are available to resolve the isolation issue.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln",
  "data_leak"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-09-10",
 "incident_date_precision": "day",
 "first_reported": "2026-09-09",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87995",
   "publisher": "NVD",
   "title": "CVE-2026-87995: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.",
   "published_at": "2026-09-09"
  },
  {
   "url": "https://github.com/advisories/GHSA-jmc6-2wr8-h3wj",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-87995: Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin",
   "published_at": "2026-09-10"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-87995",
  "xss",
  "account-takeover"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}