A vulnerability has been found in Open-WebUI 0.5.16/0.6.33 and classified as problematic. This issue affects some unknown processing of the component Model Description Handler. Performing a manipulation results in cross site scripting.

This vulnerability is identified as CVE-2026-44721. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.