Search: CVE-2026-44549

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.3	EPSS 0.3%	CVE-2026-44549open-webui · Cross-site Scripting High7.3EPSS 0.3%2026-05-15GCVE DatabaseCVE-2026-44549 Open WebUI versions prior to 0.8.0 contain a cross-site scripting (XSS) vulnerability related to unsafe previewing of Excel file attachments. A crafted XLSX file can exploit the sheetjs function sheet_to_html to inject malicious HTML into the DOM without sanitization, leading to XSS. This vulnerability is fixed in version 0.8.0. EPSS 0.3%Vulnerability CWE-79	GCVE Database	2026-05-15

Page 1 of 1