CVE-2026-34225 Details
Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.7.2 and below contain a Blind Server Side Request Forgery in the functionality that allows editing an image via a prompt. The affected function performs a GET request to a user-provided URL with no restriction on the domain, allowing the local address space to be accessed. Since the SSRF is blind (the response cannot be read), the primary impact is port scanning of the local network, as whether a port is open can be determined based on whether the GET request succeeds or fails. These response differentials can be automated to iterate through the entire port range and identify open ports. If the service running on an open port can be inferred, an attacker may be able to interact with it in a meaningful way, provided the service offers state-changing GET request endpoints. This issue was unresolved at the time of publication.
A blind server side request forgery (SSRF) vulnerability has been identified in Open WebUI versions through 0.7.2. The issue arises in the image editing functionality, where user-provided URLs are blindly accepted and requested without domain restrictions. This vulnerability allows interaction with the local address space. Although the SSRF is blind and the response cannot be read, it can be exploited to perform port scanning on the local network. By automating the process of sending GET requests and analyzing the success or failure of these requests, an attacker can identify open ports. If a service running on an open port can be inferred, it may be possible to interact with it, especially if the service has state-changing GET endpoints.
Users are advised to update to a version of Open WebUI that addresses this vulnerability by restricting user-provided URLs from accessing the local address space.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-jgx9-jr5x-mvpv | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/open-webui/open-webui/security/advisories/GHSA-jgx9-jr5x-mvpv | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | <= 0.7.2 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 21, 2026 | Initial Analysis | [email protected] |
| Apr 14, 2026 | CVE Modified | CISA-ADP |
| Apr 14, 2026 | New CVE Received | [email protected] |