CVE-2025-29446

Open-webui v0.5.16 is affected by a Server-Side Request Forgery (SSRF) in routers/ollama.py verify_connection. Root cause is the verify_connection function allowing manipulation of backend requests. Impact is limited to SSRF with local attack vector per the CVSS data (low base score, local access...