Which versions of Openui are affected by CVE-2026-4992?

Organizations using wandb OpenUI should be aware of moderate risk from CVE-2026-4992, a cross-site scripting vulnerability rated CVSS 5.3.

Is there a public PoC exploit available for CVE-2026-4992?

Yes, a public proof-of-concept exploit is available for CVE-2026-4992. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2026-4992?

Within 30 days: Identify affected systems running wandb OpenUI and apply vendor patches as part of regular patch cycle. Verify Content-Security-Policy and output encoding.

Openui CVE-2026-4992

Q: What is the CVSS score of CVE-2026-4992?

CVE-2026-4992 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-16898 LOW

Cross-site Scripting (XSS) (CWE-79)

2026-03-27 VulDB

GHSA-gj7h-pv73-9jrx

XSS Openui Wandb

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

PoC Detected

Mar 30, 2026 - 13:26 vuln.today

Public exploit code

EUVD ID Assigned

Mar 27, 2026 - 22:46 euvd

EUVD-2026-16898

Analysis Generated

Mar 27, 2026 - 22:46 vuln.today

CVE Published

Mar 27, 2026 - 22:03 nvd

MEDIUM 5.3

DescriptionCVE.org

A flaw has been found in wandb OpenUI up to 1.0. This affects the function create_share/get_share of the file backend/openui/server.py of the component HTMLAnnotator Component. Executing a manipulation of the argument ID can lead to HTML injection. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

HTML injection in wandb OpenUI up to version 1.0 allows remote unauthenticated attackers to inject arbitrary HTML via manipulation of the ID argument in the create_share and get_share functions in backend/openui/server.py. The attack requires user interaction and has a publicly available exploit. CVSS score is 5.3 (moderate) with EPSS indicating limited practical exploitation probability. The vendor has not responded to disclosure attempts.

Technical ContextAI

The vulnerability exists in the HTMLAnnotator component's share functionality within wandb OpenUI, specifically in the create_share and get_share functions. CWE-79 (Cross-site Scripting/XSS) indicates that user-supplied input via the ID parameter is not properly sanitized or encoded before being rendered as HTML content. The network-accessible backend endpoint processes the ID argument without validation, allowing an attacker to inject malicious HTML tags and scripts. This is a classic input validation failure where the application fails to implement proper output encoding for HTML contexts.

RemediationAI

Update wandb OpenUI to a version beyond 1.0 that implements proper HTML entity encoding or uses a templating engine with automatic XSS protection for user-supplied input in the ID parameter. Implement input validation to reject or sanitize ID parameters that contain HTML special characters. As an interim workaround, restrict network access to the backend/openui/server.py endpoints or implement Web Application Firewall (WAF) rules to block requests with HTML metacharacters in the ID parameter. No specific patched version number is available from vendor advisory; users should monitor the wandb project on GitHub (https://github.com/wandb/openui) for release notes indicating XSS fixes.