PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-54011 open-webui CVE debrief

CVE-2026-54011 is a high-severity vulnerability in Open WebUI, a self-hosted artificial intelligence platform. The vulnerability arises from the platform's rendering of Mermaid blocks from Markdown files in the file preview panel. Specifically, Open WebUI inserts the generated SVG into the DOM using innerHTML, and Mermaid is configured with securityLevel: 'loose'. This allows attacker-controlled Mermaid content to be rendered unsafely, resulting in JavaScript execution in the victim's browser under the application origin. A working payload was validated through the Markdown preview path. The vulnerability is fixed in version 0.9.6.

Vendor
open-webui
Product
Unknown
CVSS
HIGH 8.7
CISA KEV
Not listed in stored evidence
Original CVE published
2026-06-23
Original CVE updated
2026-06-25
Advisory published
2026-06-23
Advisory updated
2026-06-25

Who should care

Organizations using Open WebUI, especially those with sensitive data or high security requirements, should prioritize patching this vulnerability. The high CVSS score of 8.7 indicates a significant risk of exploitation. Security teams should ensure that all instances of Open WebUI are updated to version 0.9.6 or later.

Technical summary

The vulnerability in Open WebUI stems from insecure rendering of Mermaid blocks in Markdown previews. Mermaid is a tool for generating diagrams from text via a JavaScript-based generation. When rendering Mermaid blocks, Open WebUI uses innerHTML to insert the generated SVG into the DOM. However, Mermaid is configured with securityLevel: 'loose', which allows for the execution of JavaScript code embedded within Mermaid diagrams. An attacker can craft malicious Mermaid code that, when rendered, executes JavaScript in the context of the victim's browser. This can lead to unauthorized actions, data theft, or further exploitation. The vulnerability is particularly dangerous because it can be exploited through the Markdown preview feature, which may be accessible to users who do not typically have administrative privileges.

Defensive priority

High. Given the CVSS score of 8.7 and the potential for JavaScript execution, immediate patching is recommended.

Recommended defensive actions

  • Update Open WebUI to version 0.9.6 or later.
  • Review and restrict Markdown preview access to trusted users.
  • Implement Content Security Policy (CSP) to mitigate potential JavaScript execution.
  • Monitor for suspicious activity, especially in the Markdown preview feature.
  • Consider temporarily disabling Markdown preview until the update can be applied.

Evidence notes

The CVE-2026-54011 vulnerability was validated through a working payload in the Markdown preview path. The vulnerability is fixed in Open WebUI version 0.9.6. The CVSS score of 8.7 indicates a high severity level.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-54011 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-54011

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-54011 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-54011

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.