What is CVE-2025-0192?

CVE-2025-0192 is a medium-severity vulnerability in Wandb Wandb/openui, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2025-03-20.

How severe is CVE-2025-0192?

Medium severity. CVSS v3 base score is 5.4 out of 10.

XSS in Wandb Wandb/openui

CVE-2025-0192

A stored Cross-site Scripting (XSS) vulnerability exists in the latest version of wandb/openui. The vulnerability is present in the edit HTML functionality, where an attacker can inject malicious scripts. When the modified HTML is shared with another user, the XSS payload executes, potentially leading to the theft of user prompt history and other sensitive information.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (20.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N.

Affected products

Wandb Wandb/openui — versions unspecified

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

security@huntr.dev

Frequently asked questions

What is CVE-2025-0192?: CVE-2025-0192 is a medium-severity vulnerability in Wandb Wandb/openui, classified under Cross-site Scripting. CVSS score: 5.4/10. Published 2025-03-20.
How severe is CVE-2025-0192?: Medium severity. CVSS v3 base score is 5.4 out of 10.