CVE-2026-45401

CVE Enrichment

CVSS: 8.5 HIGH
EPSS: 0.30%
EPSS Percentile: 22.72%
CISA KEV: Not listed

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in backend/open_webui/retrieval/web/utils.py only validates the initial URL submitted by the caller. The HTTP clients used downstream (sync requests, async aiohttp, langchain's WebBaseLoader) follow HTTP 3xx redirects by default and do not re-validate the redirect target against the private-IP / metadata-IP block list. Any authenticated user can therefore submit a public URL that 302-redirects to an internal address (e.g. 127.0.0.1, 169.254.169.254, RFC1918) and read the internal response body via the /api/v1/retrieval/process/web endpoint, the /api/v1/images/... endpoints, the /api/chat/completions endpoint with an image_url content part, and any other route that calls these helpers. This vulnerability is fixed in 0.9.5.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 16-May-2026 04:16
Last Modified: 17-Jun-2026 17:52
EPSS Date: 2026-11-02
CWE: CWE-918

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:C /
                            C:H /
                            I:L /
                            A:N

Affected Products / Versions

openwebui / open_webui Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 0.9.5
cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*

References

134c704f-9b21-4f2e-91b3-4a467353bcc0

Last enrichment sync: 03-Nov-2026 02:43
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

Researcher Chinmohan Nayak has discovered a high-severity SSRF vulnerability in Open WebUI (CVE-2026-45401). Security Roundup Covers Router Exploitation, CISA Credential Exposure and Gas Station Intrusions

CVE (1)

People (1)

Vendors (4)

Products (4)

Industries (1)

Countries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.