HIGH 8.7 GitHub
CVE-2026-70492
Open WebUI: Stored XSS via unescaped KaTeX render-error fallback in rendered messages
## Summary
Any authenticated user can store a chat message whose math block makes KaTeX fail with a stack overflow instead of a parse error. When that happens the renderer falls back to inserting the original math source into the page as HTML rather than as text, so script in the message runs in the browser of whoever views it. Every surface that renders messages is affected, including shared chats and channels, and the missing control is output escaping on the error path.
## Preconditions
Defa
Affected Products
- pip/open-webui >= 0.10.0, < 0.11.0
References
- https://github.com/advisories/GHSA-pwxh-7358-jq2x
- https://github.com/open-webui/open-webui/security/advisories/GHSA-pwxh-7358-jq2x
- https://github.com/open-webui/open-webui/pull/26718
- https://github.com/open-webui/open-webui/commit/bc600d3f085802c45aa8f38c30e6e8c986bde6cc
This high severity vulnerability with a CVSS score of 8.7 was published on 2026-08-04 via GitHub. Affected: pip/open-webui >= 0.10.0, < 0.11.0.
vulnfeed aggregates 9214 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.