CVE Explorer
CVE-2026-56399
Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpoint that allows authenticated users to bypass SSRF protections. Attackers can manipulate URL parameters with location redirect headers to access internal services and potentially execute commands via instance secrets.
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1
Preserved source conflicts
No provider value was silently selected as the winner.
cvss · 2 assertions
{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:ff8318799b28760bf0744f3d2e4e0d12e0c9645317c975171011db35bedf6655 · sha256:a6c8667c682d7cde… · /containers/cna/metrics/1/cvssV3_1
{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":5.3,"baseSeverity":"MEDIUM","privilegesRequired":"LOW","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE"},"metric_type":"cvssV4_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:ff8318799b28760bf0744f3d2e4e0d12e0c9645317c975171011db35bedf6655 · sha256:a6c8667c682d7cde… · /containers/cna/metrics/0/cvssV4_0
Affected products and versions
1 source assertion{"defaultStatus":"unaffected","packageURL":"pkg:pypi/open-webui","product":"open-webui","vendor":"open-webui","versions":[{"lessThan":"0.6.27","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"0.6.27","versionType":"semver"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:ff8318799b28760bf0744f3d2e4e0d12e0c9645317c975171011db35bedf6655 · sha256:a6c8667c682d7cde… · /containers/cna/affected/0
Provider-owned CVSS observations
2 source assertions{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:ff8318799b28760bf0744f3d2e4e0d12e0c9645317c975171011db35bedf6655 · sha256:a6c8667c682d7cde… · /containers/cna/metrics/1/cvssV3_1
{"metric":{"attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":5.3,"baseSeverity":"MEDIUM","privilegesRequired":"LOW","subAvailabilityImpact":"NONE","subConfidentialityImpact":"LOW","subIntegrityImpact":"NONE","userInteraction":"NONE","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"NONE"},"metric_type":"cvssV4_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:ff8318799b28760bf0744f3d2e4e0d12e0c9645317c975171011db35bedf6655 · sha256:a6c8667c682d7cde… · /containers/cna/metrics/0/cvssV4_0
CWE assertions
1 source assertion{"cweId":"CWE-918","description":"Server-Side Request Forgery (SSRF)","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:ff8318799b28760bf0744f3d2e4e0d12e0c9645317c975171011db35bedf6655 · sha256:a6c8667c682d7cde… · /containers/cna/problemTypes/0/descriptions/0
Source references
4 source assertions{"name":"https://github.com/open-webui/open-webui/commit/02238d3113e966c353fce18f1b65117380896774","tags":["patch"],"url":"https://github.com/open-webui/open-webui/commit/02238d3113e966c353fce18f1b65117380896774"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:ff8318799b28760bf0744f3d2e4e0d12e0c9645317c975171011db35bedf6655 · sha256:a6c8667c682d7cde… · /containers/cna/references/1
{"name":"GitHub Security Advisory (GHSA-82r6-c5jm-f3mw)","tags":["vendor-advisory"],"url":"https://github.com/open-webui/open-webui/security/advisories/GHSA-82r6-c5jm-f3mw"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:ff8318799b28760bf0744f3d2e4e0d12e0c9645317c975171011db35bedf6655 · sha256:a6c8667c682d7cde… · /containers/cna/references/0
{"tags":["exploit"],"url":"https://github.com/open-webui/open-webui/security/advisories/GHSA-82r6-c5jm-f3mw"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:ff8318799b28760bf0744f3d2e4e0d12e0c9645317c975171011db35bedf6655 · sha256:a6c8667c682d7cde… · /containers/adp/0/references/0
{"name":"VulnCheck Advisory: Open WebUI - Server-Side Request Forgery via Location Redirect in /api/v1/retrieval/process/web","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/open-webui-server-side-request-forgery-via-location-redirect-in-api-v1-retrieval-process-web"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:ff8318799b28760bf0744f3d2e4e0d12e0c9645317c975171011db35bedf6655 · sha256:a6c8667c682d7cde… · /containers/cna/references/2
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.