CVE-2025-29446

open-webui v0.5.16 is vulnerable to SSRF in routers/ollama.py in function verifyconnection...

CVE-2025-29446

Open-webui v0.5.16 is affected by a Server-Side Request Forgery (SSRF) in routers/ollama.py verify_connection. Root cause is the verify_connection function allowing manipulation of backend requests. Impact is limited to SSRF with local attack vector per the CVSS data (low base score, local access...

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, user-friendly self-hosted WebUI from Open WebUI open source. A security vulnerability exists in Open WebUI version v0.5.16, which stems from the vulnerability of the verifyconnection function in routers/ollama.py to a server-side request forgery attack...