Dashboard / CVE-2026-45401

CVE-2026-45401

HIGH 1 PoC
MEDIUM Priority: 0.03 BB Relevance: 77/100
Published: 2026-05-15 Modified: 2026-11-11 First seen: 2026-11-11 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Scope Change

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Changed
C: High
I: Low
A: None

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in backend/open_webui/retrieval/web/utils.py only validates the initial URL submitted by the caller. The HTTP clients used downstream (sync requests, async aiohttp, langchain's WebBaseLoader) follow HTTP 3xx redirects by default and do not re-validate the redirect target against the private-IP / metadata-IP block list. Any authenticated user can therefore submit a public URL that 302-redirects to an internal address (e.g. 127.0.0.1, 169.254.169.254, RFC1918) and read the internal response body via the /api/v1/retrieval/process/web endpoint, the /api/v1/images/... endpoints, the /api/chat/completions endpoint with an image_url content part, and any other route that calls these helpers. This vulnerability is fixed in 0.9.5.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
openwebui open_webui < 0.9.5

References & Advisories (1)

Proof of Concept (1)

★ 1
https://github.com/nayakchinmohan/CVE-2026-45401
nomi-sec

Bug Bounty Relevance

77 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction
✓ PoC available (1)

CVSS Score

8.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

EPSS — Exploitation Probability

0.30%
Raw Score 0.003000
Percentile 23.0%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00300
2026-11-12
0.00300
2026-11-10
0.00300

Intelligence Sources

nvd ref →

External Links