Количество 3
Количество 3
CVE-2026-45338
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSRF) vulnerability exists in _process_picture_url() in backend/open_webui/utils/oauth.py (line ~1338). The function fetches arbitrary URLs from OAuth picture claims without applying validate_url(), allowing an attacker to force the server to make HTTP requests to internal resources and exfiltrate the full response. This vulnerability is fixed in 0.9.0.
GHSA-24c9-2m8q-qhmh
Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
BDU:2026-07202
Уязвимость функции _process_picture_url() (backend/open_webui/utils/oauth.py) веб-интерфейса на базе искуственного интеллекта Open WebUI, позволяющая нарушителю осуществить SSRF-атаку
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-45338 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSRF) vulnerability exists in _process_picture_url() in backend/open_webui/utils/oauth.py (line ~1338). The function fetches arbitrary URLs from OAuth picture claims without applying validate_url(), allowing an attacker to force the server to make HTTP requests to internal resources and exfiltrate the full response. This vulnerability is fixed in 0.9.0. | CVSS3: 7.7 | 0% Низкий | 3 месяца назад |
| GHSA-24c9-2m8q-qhmh Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py) | CVSS3: 7.7 | 0% Низкий | 3 месяца назад |
 | BDU:2026-07202 Уязвимость функции _process_picture_url() (backend/open_webui/utils/oauth.py) веб-интерфейса на базе искуственного интеллекта Open WebUI, позволяющая нарушителю осуществить SSRF-атаку | CVSS3: 5.4 | 0% Низкий | 3 месяца назад |
Уязвимостей на страницу