CVE-2026-45401

CVEs › CVE-2026-45401

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in backend/open_webui/retrieval/web/utils.py only validates the initial URL submitted by the caller. The HTTP clients used downstream (sync requests, async aiohttp, langchain's WebBaseLoader) follow HTTP 3xx redirects by default and do not re-validate the redirect target against the private-IP / metadata-IP block list. Any authenticated user can therefore submit a public URL that 302-redirects to an internal address (e.g. 127.0.0.1, 169.254.169.254, RFC1918) and read the internal response body via the /api/v1/retrieval/process/web endpoint, the /api/v1/images/... endpoints, the /api/chat/completions endpoint with an image_url content part, and any other route that calls these helpers. This vulnerability is fixed in 0.9.5.

Overview

State: PUBLISHED
Assigner (CNA): GitHub_M
CVSS severity: HIGH
CVSS score: 8.5 / 10
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Effective score: 8.5 / 10 HIGH source: CNA overview
CWE(s): CWE-918
Reserved: 2026-05-12
Published: 2026-05-15 22:37 UTC
Last updated: 2026-05-15 22:37 UTC
Source: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/45xxx/CVE-2026-45401.json
Linked Threat: CVE-2026-45401 — Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published: 2026-05-15 21:16:38 UTC
NVD last modified: 2026-05-19 12:07:26 UTC
NVD CVSS v3.1: 8.5 / 10 HIGH source: security-advisories@github.com
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Exploitability subscore: 3.1 / 10
Impact subscore: 4.7 / 10
EPSS score: 0.0004 (probability of exploitation in next 30 days)
EPSS percentile: 11.74% vs all CVEs — higher = more likely to be exploited, as of 2026-05-24

NVD / KEV / EPSS data refreshed 2026-05-25 08:28 UTC. Re-run the 🛰 Backfill from NVD button above to refresh.

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID: EUVD-2026-30631
Assigner: GitHub_M
Published: May 15, 2026, 8:37:29 PM
Updated: May 18, 2026, 12:48:33 PM
EUVD base score (CVSS 3.1): 8.5 / 10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
EUVD-reported EPSS: 0.0400
Vendors: open-webui
Products: open-webui (< 0.9.5)
Aliases: GHSA-rh5x-h6pp-cjj6

ENISA description: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in backend/open_webui/retrieval/web/utils.py only validates the initial URL submitted by the caller. The HTTP clients used downstream (sync requests, async aiohttp, langchain's WebBaseLoader) follow HTTP 3xx redirects by default and do not re-validate the redirect target against the private-IP / metadata-IP block list. Any authenticated user can therefore submit a public URL that 302-redirects to an internal address (e.g. 127.0.0.1, 169.254.169.254, RFC1918) and read the internal response body via the /api/v1/retrieval/process/web endpoint, the /api/v1/images/... endpoints, the /api/chat/completions endpoint with an image_url content part, and any other route that calls these helpers. This vulnerability is fixed in 0.9.5.

EUVD references (1)

https://github.com/open-webui/open-webui/security/advisories/GHSA-rh5x-h6pp-cjj6

Affected products (1)

Vendor	Product	Versions	Platforms
open-webui	open-webui	`< 0.9.5` (affected)	—

Affected products — CPE 2.3 (1) NVD

NVD's normalized CPE 2.3 matchers, used by vendor tools (vulnerability scanners, asset managers) for automated detection. Compare with the CNA's free-text "Affected products" section above.

cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*

Vendor references (1)

References embedded in the original CVE record by the assigning CNA.

https://github.com/open-webui/open-webui/security/advisories/GHSA-rh5x-h6pp-cjj6 x_refsource_CONFIRM

MITRE references (1) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

https://github.com/open-webui/open-webui/security/advisories/GHSA-rh5x-h6pp-cjj6 x_refsource_CONFIRM

Web references (3)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

https://nvd.nist.gov/vuln/detail/CVE-2026-45401 tenable:nvd.nist.gov
https://www.cve.org/CVERecord?id=CVE-2026-45401 tenable:www.cve.org
https://www.first.org/epss/ tenable:www.first.org

NVD-tagged references (2)

Reference list NVD curates from the CNA record, vendor advisories, and third-party reports. The tag chips below are NVD's analyst-assigned categories.

https://github.com/open-webui/open-webui/security/advisories/GHSA-rh5x-h6pp-cjj6 security-advisories@github.com ExploitMitigationVendor Advisory
https://github.com/open-webui/open-webui/security/advisories/GHSA-rh5x-h6pp-cjj6 134c704f-9b21-4f2e-91b3-4a467353bcc0 ExploitMitigationVendor Advisory

Indicators (3)

IOCs linked to the auto-promoted Threat row.

Type	Value	VirusTotal	Attached
ipv4	`127.0.0.1`	2026-05-22 03:12 UTC)">malicious	2026-05-18 21:17 UTC
ipv4	`169.254.169.254`	2026-05-22 02:38 UTC)">not flagged	2026-05-18 21:17 UTC
domain	`utils.py`	no local data UrlVoid 0 / 35	2026-05-18 21:17 UTC

Remediations (20)

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

Broken and Updated Sims 4 Mods and CC: patch 1.124, May 12 and 21, 2026

web:forums.ea.com

About This Thread This thread tracks Sims 4 mods and CC that have been "broken" or made obsolete by game update1.124, May 12, 2026 , and the May 21 hotfix, or declared unsupported by their creators. It also tracks updated game mods, important updates to custom content, general news from/about creators, and new bugfix mods.

2026-05-22 17:24 UTC
CVE: Common Vulnerabilities and Exposures

web:www.cve.org

At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

2026-05-22 17:24 UTC
FIX Trading Community - Version 2.1.

web:www.fixtrading.org

Learn more Standards and Guidelines FIX standards have driven electronic trading for 30 years and are constantly updated to support industry needs Learn more Events and Community Our member-driven global educational and networking events bring the industry together Learn more

2026-05-22 17:24 UTC
Addressing Exchange Server May 2026 vulnerability CVE-2026-42897

web:techcommunity.microsoft.com

More information on this service can be found in Exchange Emergency Mitigation Service (Exchange EM Service) | Microsoft Learn. Customers with EM Service enabled can verify that their servers have applied the mitigation for CVE - 2026 -42897 (the ID of mitigation is M2.1.x) by doing the following:

2026-05-22 17:24 UTC
The Official Fix Chocolate Bar | Dubai's Viral Chocolate Bars

web:officialfixdessertchocolatier.com

Indulge in Dubai's viral chocolate bars with FIX Dessert Chocolatier. Shop our hero collection featuring Baklawa, Knafeh, Biscoff, and more. Fast delivery in Dubai & Abu Dhabi. Order now!

2026-05-22 17:24 UTC
Oracle Critical Patch Update Advisory - January 2026

web:www.oracle.com

Oracle Critical Patch Update Advisory - January 2026 Description A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches added since the previous Critical ...

2026-05-22 17:24 UTC
Home - PATCH Hawaii

web:www.patchhawaii.org

PATCH provides access to registered and licensed child care, offers child care subsidies to eligible families, provides child development training and ECE scholarship opportunities, and assists those interested in starting a family child care business. PATCH is a free resource hub for families, child care professionals and communities of Hawaii.

2026-05-22 17:24 UTC
Rom Patcher JS

web:www.romhacking.net

Add temporary header() Patch file: Apply patch Original ROM: Modified ROM: Patch type: IPS BPS PPF UPS APS RUP Create patch Settings Rom Patcher JS v2.9 by Marc Robledo See on GitHub Donate Language English Français Deutsch Italiano Español Nederlands Svenska Català Valencià Português Brasileiro Russian 日本語中文（简体）中文 ...

2026-05-22 17:24 UTC
CVE-2026-45401 | Tenable®

web:www.tenable.com

CVE - 2026 -45398 - IDOR: Retrieval API Bypasses Knowledge Base Access ControlsSummary_validate_collection_access() (PR #22109) checks the user-memory-* and file-* collection name prefixes but does not check knowledge base collections, which use raw UUIDs as collection names. Any authenticated user who knows a private knowledge base UUID can read its content through the retrieval query ...

2026-05-22 17:24 UTC
patch.moe - Age Verification

web:patch.moe

Age Verification Are you 18 years or older? YES NO

2026-05-22 17:24 UTC
CVE-2026-45401 - High Vulnerability - TheHackerWire

web:www.thehackerwire.com

How severe is CVE-2026-45401 ? What Openwebui products are affected by CVE-2026-45401 ? How do I fix or mitigate CVE-2026-45401 ? When was CVE-2026-45401 disclosed?

2026-05-22 03:28 UTC
Microsoft Patch Tuesday May 2026 - 120 Vulnerabilities Fixed, Including ...

web:cybersecuritynews.com

Microsoft's May 2026 Patch Tuesday lands with a heavy enterprise focus, fixing 120 vulnerabilities across Windows, Office, Azure, developer tools, and Microsoft 365 apps, including 29 remote code execution (RCE) flaws rated Critical.

2026-05-22 03:28 UTC
Nvd - Cve-2026-45401

web:nvd.nist.gov

An official website of the United States government Here's how you know

2026-05-22 03:28 UTC
Security Update Guide - Microsoft

web:portal.msrc.microsoft.com

The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

2026-05-22 03:28 UTC
Microsoft Patches Two Actively Exploited Defender Zero-Days on Windows

web:windowsreport.com

Microsoft patched two actively exploited Defender zero-days affecting Windows systems and security components.

2026-05-22 03:28 UTC
Microsoft warns of new Defender zero-days exploited in attacks

web:www.bleepingcomputer.com

On Wednesday, Microsoft started rolling out security patches for two Defender vulnerabilities that have been exploited in zero-day attacks.

2026-05-22 03:28 UTC
Critical Patches Issued for Microsoft Products, April 14, 2026

web:www.cisecurity.org

<p>Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or ...

2026-05-22 03:28 UTC
2 New Microsoft Defender Zero-Days Exploited—Patch Now ... - Forbes

web:www.forbes.com

Microsoft has confirmed an emergency security update as CISA warns that two new Defender zero-days are being exploited by attackers.

2026-05-22 03:28 UTC
Emergency patch issued for Microsoft Office, 365 over hacking threat - MSN

web:www.msn.com

Original story: Microsoft has released an emergency patch for a vulnerability in the company's Office programs that's already being exploited by hackers.

2026-05-22 03:28 UTC
Microsoft Defender CVE-2026-41091 and CVE-2026-45498 Exploited

web:blog.gridinsoft.com

Microsoft has confirmed exploitation of two Microsoft Defender vulnerabilities fixed in the May 2026 security update cycle. CVE - 2026 -41091 is an elevation-of-privilege flaw in the Microsoft Malware Protection Engine, while CVE - 2026 -45498 is a denial-of-service flaw in the Microsoft Defender Antimalware Platform [1] [2].

2026-05-22 03:28 UTC

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.

Raw JSON

The full cvelistV5 record. Download as CVE-2026-45401.json.

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "open-webui",
          "vendor": "open-webui",
          "versions": [
            {
              "status": "affected",
              "version": "< 0.9.5"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, the validate_url() function in backend/open_webui/retrieval/web/utils.py only validates the initial URL submitted by the caller. The HTTP clients used downstream (sync requests, async aiohttp, langchain's WebBaseLoader) follow HTTP 3xx redirects by default and do not re-validate the redirect target against the private-IP / metadata-IP block list. Any authenticated user can therefore submit a public URL that 302-redirects to an internal address (e.g. 127.0.0.1, 169.254.169.254, RFC1918) and read the internal response body via the /api/v1/retrieval/process/web endpoint, the /api/v1/images/... endpoints, the /api/chat/completions endpoint with an image_url content part, and any other route that calls these helpers. This vulnerability is fixed in 0.9.5."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "CWE-918: Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-15T20:37:29.248Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/open-webui/open-webui/security/advisories/GHSA-rh5x-h6pp-cjj6",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-rh5x-h6pp-cjj6"
        }
      ],
      "source": {
        "advisory": "GHSA-rh5x-h6pp-cjj6",
        "discovery": "UNKNOWN"
      },
      "title": "Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-45401",
    "datePublished": "2026-05-15T20:37:29.248Z",
    "dateReserved": "2026-05-12T01:48:40.451Z",
    "dateUpdated": "2026-05-15T20:37:29.248Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}