CVE-2026-54011 - Open WebUI Mermaid Markdown preview stored XSS enables JavaScript execution - Upwind | Cloud & AI Security for the Realtime Era

Security Feed

See the latest insights and analysis from our MDR team.

GHSA-v8qj-hxv7-mgvv

By Stav Salman |

17 June 2026

CVE-2026-54011 – Open WebUI Mermaid Markdown preview stored XSS enables JavaScript execution

open-webui pip package `