---
id: "CVE-2026-116004"
kind: "vulnerability"
aliases: ["CVE-2026-116004"]
title: "Onyx: cross-site scripting in craft output preview tab"
severity: "medium"
cvss: 4.0
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "onyx", "fixed": [], "affected": "<= 5.0.0", "ecosystem": "github"}]
ecosystems: []
tags: ["ai-apps", "ai-tooling", "craft", "onyx", "self-hosted", "web-frontend"]
not_affected_if: ["craft-disabled", "unknown"]
published_at: "2026-10-25T03:16:27+00:00"
first_seen_at: "2026-10-25T04:02:13+00:00"
updated_at: "2026-10-25T04:43:06+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116004", "first_seen_at": "2026-10-25T04:02:13+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-25T04:43:06+00:00"}]
---

# Onyx: cross-site scripting in craft output preview tab

Onyx, an open-source AI chat and search platform, has a cross-site scripting flaw in its craft output preview component (web/src/app/craft/components/output-panel/PreviewTab.tsx). An attacker can get script to run in a user's browser session when that preview is rendered.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- github:onyx affected <= 5.0.0 fixed ?

## How to check

- Check your Onyx version; the reported range is up to and including 5.0.0.
- Check whether Craft (the build/output panel preview) is enabled and used by your users.
- Watch the onyx-dot-app/onyx releases and GHSA-grhq-88h5-2h86 for a fix.

## Fix

unknown: no fixed version or patch commit found. VulDB reports the vendor did not respond. Until one appears, restrict Craft to trusted users or disable it. That is a precaution, not a vendor mitigation. Check the GHSA page for the fix.

## Timeline

- 2026-10-25T04:02:13+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-116004
- 2026-10-25T04:43:06+00:00 analyst — No vendor fix or patch commit found. VulDB (VDB-426102) says vendor unresponsive; cites GHSA-grhq-88h5-2h86 (not readable via web-cli). Submit title: Craft same-origin iframe sandbox bypass / stored XSS, tested on main commit 711a047, which is an unrelated CI commit, not a fix. PoC is claimed but I found no link. Nothing marked verified.

## Documents

- [describes] VulDB VDB-426102: Onyx up to 5.0.0 PreviewTab.tsx XSS https://vuldb.com/vuln/426102

## From the sources

A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.0. Impacted is an unknown function of the file web/src/app/craft/components/output-panel/PreviewTab.tsx. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_