Lucene search
K

CVE-2026-45400

๐Ÿ—“๏ธย 15 May 2026ย 20:40:47Reported byย GitHub_MTypeย 
cve
ย cve
๐Ÿ”—ย web.nvd.nist.gov๐Ÿ‘ย 10ย Views

Open WebUI had a server side forgery bypass in validate_url before version 0.9.5; fixed in 0.9.5.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-45400
15 May 202620:40
โ€“attackerkb
Circl
CVE-2026-45400
10 May 202619:37
โ€“circl
CNNVD
Open WebUI ไปฃ็ ้—ฎ้ข˜ๆผๆดž
15 May 202600:00
โ€“cnnvd
Cvelist
CVE-2026-45400 Open WebUI: Server-Side Request Forgery (SSRF) bypass in `validate_url`
15 May 202620:40
โ€“cvelist
EUVD
EUVD-2026-30636
15 May 202620:40
โ€“euvd
Github Security Blog
Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url`
14 May 202620:27
โ€“github
NVD
CVE-2026-45400
15 May 202621:16
โ€“nvd
OSV
GHSA-8W7Q-Q5JP-JVGX Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url`
14 May 202620:27
โ€“osv
Positive Technologies
PT-2026-41195
14 May 202600:00
โ€“ptsecurity
RedhatCVE
CVE-2026-45400
5 Jun 202619:18
โ€“redhatcve
Rows per page
NVD
Vulners
Node
[
  {
    "vendor": "open-webui",
    "product": "open-webui",
    "versions": [
      {
        "version": "< 0.9.5",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

19 May 2026 12:08Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.18.5
EPSS0.00033
SSVC
10