EUVD-2026-16917Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
6DescriptionCVE.org
A vulnerability was determined in wandb OpenUI up to 1.0. Affected by this vulnerability is an unknown functionality of the file frontend/public/annotator/index.html of the component Window Message Event Handler. This manipulation causes cross site scripting. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Stored cross-site scripting (XSS) in wandb OpenUI up to version 1.0 via the Window Message Event Handler in frontend/public/annotator/index.html allows authenticated remote attackers to inject malicious scripts with user interaction. The vulnerability has a low CVSS score (3.5) due to authentication and user-interaction requirements, but publicly available exploit code exists and the vendor has not responded to early disclosure notifications.
Technical ContextAI
The vulnerability stems from improper sanitization of window message events in the annotator component (CWE-79: Improper Neutralization of Input During Web Page Generation). The Window Message Event Handler in OpenUI's frontend processes untrusted data from postMessage() calls without adequate validation or output encoding. This is a classic reflected/stored XSS weakness where user-controlled input flows directly into the DOM or HTML context. The affected CPE indicates wandb OpenUI as the product family, with all versions up to and including 1.0 containing this flaw. The postMessage API, while powerful for cross-origin communication, is frequently the source of DOM-based XSS when handlers trust their message sources without validation.
RemediationAI
Upgrade wandb OpenUI to a version newer than 1.0 when available from the vendor. Immediate workaround options are limited due to vendor non-responsiveness; however, users should restrict access to the annotator interface to trusted users only and apply input validation/content security policies (CSP) at the web server level to mitigate XSS impact. The exploit code is documented in the VulDB reference (https://vuldb.com/?id.353882) and a proof-of-concept is publicly available at https://gist.github.com/YLChen-007/899f210b2d78e163d13561bb7f49b4da, which can be used to validate whether your instance is vulnerable. Given the vendor's lack of response to early disclosure, monitor community channels and security mailing lists for unofficial patches or vendor updates.
HTML injection in wandb OpenUI up to version 1.0 allows remote unauthenticated attackers to inject arbitrary HTML via ma
Information disclosure in wandb OpenUI up to version 1.0/3.5-turb allows authenticated local network attackers to expose
Wandb OpenUI up to version 1.0 contains hard-coded credentials exposure in backend/openui/config.py where the LITELLM_MA
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today