CVE-2026-109288 | Open WebUI up to 0.11.3 MarkdownInlineTokens MarkdownInlineTokens.svelte cross site scripting

October 12, 2026 Yanac

A vulnerability identified as problematic has been detected in Open WebUI up to 0.11.3. This issue affects some unknown processing of the file MarkdownInlineTokens.svelte of the component MarkdownInlineTokens. Performing a manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-109288. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More