CVE-2026-45331

🗓️ 15 May 2026 19:22:58Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 18 Views🌐 WEB

Open WebUI SSRF in web search allows IPv6 bypass and IPv4 mapped addresses.

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2026-45331	15 May 202619:22	–	attackerkb
Circl	CVE-2026-45331	9 May 202612:07	–	circl
CNNVD	Open WebUI 代码问题漏洞	15 May 202600:00	–	cnnvd
Cvelist	CVE-2026-45331 Open WebUI: Full SSRF Vulnerability in the RAG Web Search Feature	15 May 202619:22	–	cvelist
EUVD	EUVD-2026-30611	15 May 202619:22	–	euvd
Github Security Blog	Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature	14 May 202620:18	–	github
NVD	CVE-2026-45331	15 May 202620:16	–	nvd
OSV	GHSA-4V7R-F4W8-8972 Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature	14 May 202620:18	–	osv
Positive Technologies	PT-2026-41172	14 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-45331	5 Jun 202619:18	–	redhatcve

NVD

Vulners

Node

openwebui open_webuiRange<0.9.0

[
  {
    "vendor": "open-webui",
    "product": "open-webui",
    "versions": [
      {
        "version": "< 0.9.0",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/open-webui/open-webui/security/advisories/GHSA-4v7r-f4w8-8972

Parameter	Position	Path	Description	CWE
private	path	backend/open_webui/retrieval/web/utils.py	In validate_url(), IPv6 validation uses validators.ipv6 with private=True which is not implemented for IPv6, causing bypass of IPv6 private-range filtering; IPv4-mapped IPv6 addresses bypass IPv4 checks, potentially allowing access to restricted networks.	CWE-918

17 Jun 2026 10:51Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.5

EPSS0.00286

SSVC

CWE-918