CVE-2026-109290 | Open-Webui Open WebUI up to 0.11.3 Docx Preview DocxPreview.svelte cross site scripting

October 12, 2026 Yanac

A vulnerability labeled as problematic has been found in Open-Webui Open WebUI up to 0.11.3. Impacted is an unknown function of the file DocxPreview.svelte of the component Docx Preview. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-109290. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More