{"id":"CVE-2026-116004","kind":"vulnerability","aliases":["CVE-2026-116004"],"related":[],"title":"Onyx: cross-site scripting in craft output preview tab","description":"A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.","summary":"Onyx, an open-source AI chat and search platform, has a cross-site scripting flaw in its craft output preview component (web/src/app/craft/components/output-panel/PreviewTab.tsx). An attacker can get script to run in a user's browser session when that preview is rendered.","severity":"medium","cvss":4.0,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"onyx","fixed":[],"affected":"<= 5.0.0","ecosystem":"github"}],"ecosystems":[],"tags":["ai-apps","ai-tooling","craft","onyx","self-hosted","web-frontend"],"not_affected_if":["craft-disabled","unknown"],"how_to_check":"- Check your Onyx version; the reported range is up to and including 5.0.0.\n- Check whether Craft (the build/output panel preview) is enabled and used by your users.\n- Watch the onyx-dot-app/onyx releases and GHSA-grhq-88h5-2h86 for a fix.","fix":"unknown: no fixed version or patch commit found. VulDB reports the vendor did not respond. Until one appears, restrict Craft to trusted users or disable it. That is a precaution, not a vendor mitigation. Check the GHSA page for the fix.","status":"open","published_at":"2026-10-25T03:16:27+00:00","first_seen_at":"2026-10-25T04:02:13+00:00","triaged_at":"2026-10-25T04:41:50+00:00","updated_at":"2026-10-25T04:43:06+00:00","category":"ai-tooling","confidence":0.6,"triage":{"at":"2026-10-25T04:41:50Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Onyx: cross-site scripting in craft output preview tab","impact":"medium","summary":"Onyx, an open-source AI chat and search platform, has a cross-site scripting flaw in its craft output preview component (web/src/app/craft/components/output-panel/PreviewTab.tsx). An attacker can get script to run in a user's browser session when that preview is rendered.","category":"ai-tooling","nicknames":[],"who_cares":["onyx","self-hosted","ai-apps","web-frontend"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker script runs in victim's browser session on the Onyx site","analyst_note":"Find the vendor fix version and patch commit for PreviewTab.tsx; the sources say the vendor did not respond to disclosure.","how_to_check":"- Check the installed Onyx version against the release tags in the project repository; the affected range is up to and including `5.0.0`.\n- Confirm whether the deployment uses the craft output preview feature in the web app.","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Teams that run a self-hosted Onyx web frontend at version 5.0.0 or earlier are exposed. The sources do not say whether managed or hosted Onyx instances are affected or which fixed version to move to.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.00059,"input_tokens":3354,"output_tokens":509,"severity_before":"medium"},"analyst_status":"done","analyst_note":"Find the vendor fix version and patch commit for PreviewTab.tsx; the sources say the vendor did not respond to disclosure.","search":"'-116004':13A,16A '-2026':12A,15A '5.0.0':88C 'ai':19B,22B,37B 'ai-app':18B 'ai-tool':21B 'app':20B,84C 'attack':57B,106C 'browser':67B 'chat':38B 'compon':54B 'contact':124C 'craft':7A,24B,51B 'cross':3A,45B,102C 'cross-sit':2A,44B 'cve':11A,14A 'detect':79C 'disclos':115C 'disclosur':128C 'dot':83C 'earli':125C 'exploit':112C 'file':96C 'flaw':48B 'frontend':31B 'function':93C 'get':59B 'host':28B 'impact':89C 'initi':109C 'lead':100C 'manipul':99C 'may':118C 'onyx':1A,17A,25B,32B,82C,85C 'onyx-dot-app':81C 'open':35B 'open-sourc':34B 'output':8A,52B 'platform':41B 'preview':9A,53B,71B 'public':116C 'remot':110C 'render':73B 'respond':132C 'run':62B 'script':5A,47B,60B,104C 'search':40B 'secur':75C 'self':27B 'self-host':26B 'session':68B 'site':4A,46B,103C 'sourc':36B 'tab':10A 'tool':23B 'unknown':92C 'use':120C 'user':65B 'vendor':122C 'vulner':76C 'way':135C 'web':30B 'web-frontend':29B 'web/src/app/craft/components/output-panel/previewtab.tsx':55B,97C","nicknames":[],"mitigations":[],"who_affected":"Self-hosted Onyx deployments at 5.0.0 or earlier that use Craft, the output panel preview, are exposed. A user has to view crafted content in the preview, and the reported flaw is that the preview iframe is same-origin with the app, so script in it can reach the user's session. Teams that do not enable or use Craft can likely skip it. No fixed version has been published that I could find.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-25T03:16:27+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"cna@vuldb.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116004","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116004","severity":null,"published_at":"2026-10-25T03:16:27+00:00","modified_at":"2026-10-25T03:16:27+00:00","first_seen_at":"2026-10-25T04:02:13+00:00","fetched_at":"2026-10-25T04:02:13+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-116004:816","url":null,"severity":null,"published_at":"2026-10-25T04:43:06+00:00","modified_at":"2026-10-25T04:43:06+00:00","first_seen_at":"2026-10-25T04:43:06+00:00","fetched_at":"2026-10-25T04:43:06+00:00","note":"No vendor fix or patch commit found. VulDB (VDB-426102) says vendor unresponsive; cites GHSA-grhq-88h5-2h86 (not readable via web-cli). Submit title: Craft same-origin iframe sandbox bypass / stored XSS, tested on main commit 711a047, which is an unrelated CI commit, not a fix. PoC is claimed but I found no link. Nothing marked verified."}],"documents":[{"id":3404,"url":"https://vuldb.com/vuln/426102","title":"VulDB VDB-426102: Onyx up to 5.0.0 PreviewTab.tsx XSS","kind":"advisory","source":"analyst","text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}