CVE-2026-70486 | Open WebUI up to 0.10.x Terminal File Preview cross-domain policy

A vulnerability has been found in Open WebUI up to 0.10.x and classified as problematic. This impacts an unknown function of the component Terminal File Preview. The manipulation leads to permissive cross-domain policy with untrusted domains.

This vulnerability is referenced as CVE-2026-70486. Remote exploitation of the attack is possible. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More