CVE-2025-64495
Last modified
CVE-2025-64495 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is assigned to the DOM sink .innerHtml without sanitisation. EPSS estimates a 0.46% chance of exploitation in the next 30 days.
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is assigned to the DOM sink .innerHtml without sanitisation. Any user with permissions to create prompts can abuse this to plant a payload that could be triggered by other users if they run the corresponding / command to insert the prompt. This issue is fixed in version 0.6.35.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Openwebui | Open Webui | < 0.6.35 |
References
- https://github.com/open-webui/open-webui/security/advisories/GHSA-w7xj-8fx7-wfchExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-64495?
How severe is CVE-2025-64495?
How do I fix CVE-2025-64495?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-6449A vulnerability was found in code-projects Simple Online Hot…9.8
- CVE-2025-64490SuiteCRM is an open-source, enterprise-ready Customer Relati…8.3
- CVE-2025-64491SuiteCRM is an open-source, enterprise-ready Customer Relati…6.1
- CVE-2025-64492SuiteCRM is an open-source, enterprise-ready Customer Relati…8.8
- CVE-2025-64493SuiteCRM is an open-source, enterprise-ready Customer Relati…6.5
- CVE-2025-64494Soft Serve is a self-hostable Git server for the command lin…4.6
- CVE-2025-64496Open WebUI is a self-hosted artificial intelligence platform…8
- CVE-2025-64497Tuleap is an Open Source Suite for management of software de…6.5
- CVE-2025-64498Tuleap is an Open Source Suite for management of software de…4.3
- CVE-2025-64499Tuleap is a free and open source suite for management of sof…5.4
- CVE-2025-6450A vulnerability was found in code-projects Simple Online Hot…9.8
- CVE-2025-64500Symfony is a PHP framework for web and console applications …7.3
Are you affected by CVE-2025-64495?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST