CVE-2026-45401

🗓️ 15 May 2026 20:37:29Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 18 Views🌐 WEB

CVE-2026-45401 Open WebUI SSRF via redirects; 0.9.5 fixes bypass of private address and metadata address blocklists.

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2026-45401	15 May 202620:37	–	attackerkb
Circl	CVE-2026-45401	10 May 202619:43	–	circl
CNNVD	Open WebUI 代码问题漏洞	15 May 202600:00	–	cnnvd
Cvelist	CVE-2026-45401 Open WebUI: SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints	15 May 202620:37	–	cvelist
EUVD	EUVD-2026-30631	15 May 202620:37	–	euvd
Github Security Blog	Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958)	14 May 202620:27	–	github
NVD	CVE-2026-45401	15 May 202621:16	–	nvd
Tenable Nessus	Open WebUI < 0.9.5 Multiple Vulnerabilities	15 May 202600:00	–	nessus
OSV	GHSA-RH5X-H6PP-CJJ6 Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958)	14 May 202620:27	–	osv
Positive Technologies	PT-2026-41196	14 May 202600:00	–	ptsecurity

NVD

Vulners

Node

openwebui open_webuiRange<0.9.5

[
  {
    "vendor": "open-webui",
    "product": "open-webui",
    "versions": [
      {
        "version": "< 0.9.5",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/open-webui/open-webui/security/advisories/GHSA-rh5x-h6pp-cjj6

Parameter	Position	Path	Description	CWE
url	request body	/api/v1/retrieval/process/web	Public URL submitted that 302-redirects to private/internal IPs can be used to read internal response bodies through this endpoint.	CWE-918
image_url	request body	/api/chat/completions	Image URL content in chat completions can expose internal responses if redirects point to internal addresses.	CWE-918

19 May 2026 12:07Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.5

EPSS0.00039

SSVC

CWE-918