CVE-2026-26192: Open WebUI vulnerable to Stored XSS via iFrame in citations model

July 7, 2026

Manually modifying chat history allows setting the html property within document metadata. This causes the frontend to enter a code path that treats document contents as HTML, and render them in an iFrame when the citation is previewed. This allows stored XSS via a weaponised document payload in a chat. The payload also executes when the citation is viewed on a shared chat.

References

github.com/advisories/GHSA-xc8p-9rr6-97r2
github.com/open-webui/open-webui/blob/6f1486ffd0cb288d0e21f41845361924e0d742b3/src/lib/components/chat/Messages/Citations/CitationModal.svelte
github.com/open-webui/open-webui/security/advisories/GHSA-xc8p-9rr6-97r2
nvd.nist.gov/vuln/detail/CVE-2026-26192

Code Behaviors & Features

Detect and mitigate CVE-2026-26192 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →