CVE-2025-29446

open-webui v0.5.16 is vulnerable to SSRF in routers/ollama.py in function verifyconnection...

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A security vulnerability exists in Open WebUI version v0.5.16, which stems from the vulnerability of the verifyconnection function in routers/ollama.py to a server-side request forgery attack...

CVE-2025-29446

Open-webui v0.5.16 is affected by a Server-Side Request Forgery (SSRF) in routers/ollama.py verify_connection. Root cause is the verify_connection function allowing manipulation of backend requests. Impact is limited to SSRF with local attack vector per the CVSS data (low base score, local access...