Open WebUI: Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url`
Open WebUI
More for Open WebUI RSS feed for Open WebUI
- Severity
- High, CVSS 8.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
- Record
- CVE-2026-45400
- Affects
- Open WebUI
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- May 15, 2026
- Source last modified
- June 17, 2026
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, a parsing difference between the urlparse and requests libraries led to an SSRF bypass vulnerability. This vulnerability is fixed in 0.9.5.
Description quoted from the NVD record.
Who is affected
This flaw affects Open WebUI, a chat program for talking with AI language models that your organization runs on its own computers, and which can work entirely offline. All versions before 0.9.5 are affected. The problem is in the safety check that decides which web addresses the server is allowed to contact. Because two parts of the product read web addresses differently, an attacker can get around this check and make your server send web requests to places it should be blocked from reaching. This flaw is rated High.
What to do
- Find out who installed or runs Open WebUI for your organization: a staff member, a volunteer, or an outside IT provider.
- If you run it yourselves, ask that person to update Open WebUI to version
0.9.5or later, which fixes this flaw. - If an IT provider or vendor runs it for you, send them this advisory and ask when the update to
0.9.5will be done. - Once the update is done, have the person who made it check that Open WebUI now shows version
0.9.5or later.
Analysis written from the source record as of June 17, 2026 and reviewed before publishing.