Lucene search
K

CVE-2026-45331 Open WebUI: Full SSRF Vulnerability in the RAG Web Search Feature

๐Ÿ—“๏ธย 15 May 2026ย 19:22:58Reported byย GitHub_MTypeย 
cvelist
ย cvelist
๐Ÿ”—ย www.cve.org๐Ÿ‘ย 33ย Views

CVE-2026-45331: Open WebUI SSRF in RAG Web Search due to IPv6 validation bypass before 0.9.0.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2026-45331
15 May 202619:22
โ€“attackerkb
Circl
CVE-2026-45331
9 May 202612:07
โ€“circl
CNNVD
Open WebUI ไปฃ็ ้—ฎ้ข˜ๆผๆดž
15 May 202600:00
โ€“cnnvd
CVE
CVE-2026-45331
15 May 202619:22
โ€“cve
EUVD
EUVD-2026-30611
15 May 202619:22
โ€“euvd
Github Security Blog
Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature
14 May 202620:18
โ€“github
NVD
CVE-2026-45331
15 May 202620:16
โ€“nvd
OSV
GHSA-4V7R-F4W8-8972 Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature
14 May 202620:18
โ€“osv
Positive Technologies
PT-2026-41172
14 May 202600:00
โ€“ptsecurity
RedhatCVE
CVE-2026-45331
5 Jun 202619:18
โ€“redhatcve
Rows per page
[
  {
    "vendor": "open-webui",
    "product": "open-webui",
    "versions": [
      {
        "version": "< 0.9.0",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation withย Vulners data

Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data

Api

Power your application withย Vulners API

The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access

App

Assess and manage vulnerabilities withย Vulnersย tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation