{"action":"Upgrade open-webui to 0.6.35 or later.","affected":[{"fixed":"0.6.35","introduced":"0"}],"component":"open-webui","cve_ids":["CVE-2025-64495"],"ecosystem":"PyPI","epss":0.00493,"exploited":false,"fixed_versions":["0.6.35"],"ghsa_id":"GHSA-w7xj-8fx7-wfch","id":"tcs_01M5KGVD74MX7WAFS8X7VQ5T0A","modified_at":"2026-07-07T17:47:59.974875031Z","published_at":"2026-07-07T16:03:09.739637Z","references":["https://osv.dev/vulnerability/PYSEC-2026-1741","https://github.com/open-webui/open-webui/security/advisories/GHSA-w7xj-8fx7-wfch","https://nvd.nist.gov/vuln/detail/CVE-2025-64495","https://github.com/open-webui/open-webui/commit/eb9c4c0e358c274aea35f21c2856c0a20051e5f1","https://github.com/open-webui/open-webui","https://github.com/open-webui/open-webui/blob/7a83e7dfa367d19f762ec17cac5e4a94ea2bd97d/src/lib/components/common/RichTextInput.svelte#L348","https://pypi.org/project/open-webui","https://github.com/advisories/GHSA-w7xj-8fx7-wfch"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"PYSEC-2026-1741","url":"https://osv.dev/vulnerability/PYSEC-2026-1741"}],"summary":"Open WebUI vulnerable to Stored DOM XSS via prompts when 'Insert Prompt as Rich Text' is enabled resulting in ATO/RCE"}