{"action":"Upgrade open-webui to 0.6.35 or later.","affected":[{"fixed":"0.6.35","introduced":"0"}],"component":"open-webui","cve_ids":["CVE-2025-64495"],"ecosystem":"npm","epss":0.00493,"exploited":false,"fixed_versions":["0.6.35"],"ghsa_id":"GHSA-w7xj-8fx7-wfch","id":"tcs_01M5KG1R9W52PT73XGNVPNYXMF","modified_at":"2026-07-07T17:56:10.834670648Z","published_at":"2025-11-07T15:25:23Z","references":["https://osv.dev/vulnerability/GHSA-w7xj-8fx7-wfch","https://github.com/open-webui/open-webui/security/advisories/GHSA-w7xj-8fx7-wfch","https://nvd.nist.gov/vuln/detail/CVE-2025-64495","https://github.com/open-webui/open-webui/commit/eb9c4c0e358c274aea35f21c2856c0a20051e5f1","https://github.com/open-webui/open-webui","https://github.com/open-webui/open-webui/blob/7a83e7dfa367d19f762ec17cac5e4a94ea2bd97d/src/lib/components/common/RichTextInput.svelte#L348"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-w7xj-8fx7-wfch","url":"https://osv.dev/vulnerability/GHSA-w7xj-8fx7-wfch"}],"summary":"Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE"}