The vulnerability is a stored XSS flaw in Open WebUI’s profile image update functionality. The profile_image_url field previously accepted arbitrary URI values without MIME‑type validation, enabling an attacker to inject malicious scripts that are rendered when other users view the profile picture.

Open WebUI, the self‑hosted AI platform, is affected. Any installation of the product that is older than version 0.8.0 remains vulnerable, as the profile_image_url field was patched in that release. Vendors listed in the CNA are open‑webui:open‑webui.

Based on the description, it is inferred that exploitation requires user interaction via the platform’s profile update page. The CVSS score of 5.4 indicates a medium severity flaw. No EPSS score is publicly available, but the fact that the vulnerability is stored XSS suggests that the attack vector involves a user‑initiated action. Because the platform is typically self-hosted and accessed only by authorized users, the potential impact is confined to the organization’s internal environment unless the application is exposed to external traffic. The vulnerability is not listed in CISA’s KEV catalog, so there are no known live exploits as of the last update.