How to fix CVE-2026-26193?

Within 24 hours: Inventory all Open WebUI instances and document their network exposure and data classification. Within 7 days: Implement network segmentation to restrict Open WebUI access to authorized users only and deploy WAF rules to block known exploit patterns. Within 30 days: Establish a vendor communication channel for patch availability updates and conduct a risk assessment to determine if Open WebUI should remain in production or be temporarily decommissioned pending patch release.

Is AI / ML affected by CVE-2026-26193?

CVE-2026-26193 is a high-severity vulnerability affecting Open WebUI deployments that could allow unauthorized access or data compromise on self-hosted AI platforms.

CVE-2026-26193

HIGH

2026-02-19 [email protected]

7.3

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:03 vuln.today

PoC Detected

Feb 20, 2026 - 20:15 vuln.today

Public exploit code

CVE Published

Feb 19, 2026 - 20:25 nvd

HIGH 7.3

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.44, aanually modifying chat history allows setting the `embeds` property on a response message, the content of which is loaded into an iFrame with a sandbox that has `allow-scripts` and `allow-same-origin` set, ignoring the "iframe Sandbox Allow Same Origin" configuration. This enables stored XSS on the affected chat. This also triggers when the chat is in the shared format. The result is a shareable link containing the payload that can be distributed to any other users on the instance. Version 0.6.44 fixes the issue.

Analysis

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. [CVSS 7.3 HIGH]

Remediation

Within 24 hours: Inventory all Open WebUI instances and document their network exposure and data classification. Within 7 days: Implement network segmentation to restrict Open WebUI access to authorized users only and deploy WAF rules to block known exploit patterns. …

Analysis

Detailed AI-generated intelligence summary covering attack vector, impact assessment, affected versions, remediation steps, and indicators of compromise.

POChttps://••••••••••.com/exploit

PATCHhttps://••••••••••.com/patch

ADVISORYhttps://••••••••••.com/advisory

Full analysis requires sign-in

Get intelligence summaries, risk assessment, exploit details, threat intel, and remediation guidance.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.0

CVSS: +36

POC: +20

CVE-2026-26193 vulnerability details – vuln.today

Back

CVE-2026-26193

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Analysis

Full analysis requires sign-in

Priority Score

Share

CVE-2026-26193

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Remediation

Full analysis requires sign-in

Priority Score

Share

External POC / Exploit Code