Detections
Analytics

SCA: security update for open-webui (GHSA-w7xj-8fx7-wfch)

medium Tenable Cloud Security Plugin ID 435978

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. In
 versions 0.6.34 and below, the functionality that inserts custom prompts into the chat window is
 vulnerable to DOM XSS when 'Insert Prompt as Rich Text' is enabled, since the prompt body is assigned to
 the DOM sink .innerHtml without sanitisation. Any user with permissions to create prompts can abuse this
 to plant a payload that could be triggered by other users if they run the corresponding / command to
 insert the prompt. This issue is fixed in version 0.6.35. (CVE-2025-64495)

See Also

https://github.com/advisories/GHSA-w7xj-8fx7-wfch

Plugin Details

Severity: Medium

ID: 435978

Version: Revision 1.13

Type: Local

Family: SCA Checks

Published: 11/7/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.3

Percentile: 53.59

Vendor

Vendor Severity: High

CVSS v2

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 4.3

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N

CVSS Score Source: CVE-2025-64495

CVSS v3

Risk Factor: Medium

Base Score: 5.4

Temporal Score: 4.9

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/7/2025

Vulnerability Publication Date: 11/7/2025

Reference Information

CVE: CVE-2025-64495

cwe: CWE-79