CVE-2026-54007

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.9.6

Description The chat message listener in the chat page's window message listener processes input:prompt and action:submit messages without enforcing same-origin restrictions. This allows an external site to set prompt text and trigger the submitPrompt() function in an authenticated victim session. An attacker can use a cross-origin page to auto-post messages, resulting in unauthorized requests to the 'POST /api/v1/chats/new' and 'POST /api/chat/completions' endpoints. This enables cross-site forced actions and the execution of models or tools under the victim's privileges without their consent.

Recommendations Update to version 0.9.6.