WS-2026-0092
Published:September 27, 2026
Updated:October 07, 2026
Open WebUI 0.7.0 through 0.11.3: the community sync-stats modal's verify:chat window message listener (src/lib/components/chat/Settings/SyncStatsModal.svelte) accepted messages from any origin, inserted the chat id unencoded into an authenticated request path (exportSingleChatStats in src/lib/apis/chats/index.ts), and posted the response back to window.opener with target origin "*". Any website a signed-in user visits can make the browser fetch an arbitrary authenticated endpoint (for example /api/v1/auths/ via a ../../../auths/ chat id) and receive the response, including the user's session JWT. Requires ENABLE_COMMUNITY_SHARING (default true). Fixed in 0.11.4.
Affected Packages
https://github.com/open-webui/open-webui.git (GITHUB):
Affected version(s) >=v0.7.0 <v0.11.4Fix Suggestion:
Update to version v0.11.4open-webui (PYTHON):
Affected version(s) >=0.7.0 <0.11.4Fix Suggestion:
Update to version 0.11.4Related Resources (3)
Do you need more information?
Contact UsCVSS v4
Base Score:
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
NONE
User Interaction
PASSIVE
Vulnerable System Confidentiality
HIGH
Vulnerable System Integrity
HIGH
Vulnerable System Availability
NONE
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
CVSS v3
Base Score:
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE
Weakness Type (CWE)
Origin Validation Error