CVE-2026-70480 Details
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.34 until 0.11.0, Open WebUI renders vega and vega-lite fenced code blocks in chat content by building a Vega view in the viewer browser without a restricted resource loader. Any user who can place such a block where another user will see it can make that user browser issue attacker-chosen outbound GET requests and read responses from same-origin or CORS-permissive targets into the rendered page. This issue is fixed in 0.11.0.
A client-side server-side request forgery (SSRF) vulnerability has been identified in Open WebUI versions 0.6.34 prior to 0.11.0. The issue arises from the application rendering Vega and Vega-Lite fenced code blocks in chat content without a restricted resource loader. This flaw allows any user to send outbound GET requests from the victim's browser to attacker-chosen targets, and read the responses into the rendered page, bypassing server-side SSRF protections. The vulnerability can be exploited by placing a crafted Vega block in a shared chat, channel message, or through model, RAG, or tool output that the victim will see.
Users can upgrade to Open WebUI version 0.11.0, where this vulnerability has been fixed. No additional configuration changes are necessary.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-rffm-9q57-q649 | CISA-ADP | ExploitPatchVendor Advisory |
| https://github.com/open-webui/open-webui/commit/5278eb906ebecefc6538a19bc86df09d997e43e6 | [email protected] | Patch |
| https://github.com/open-webui/open-webui/pull/26806 | [email protected] | PatchVendor Advisory |
| https://github.com/open-webui/open-webui/releases/tag/v0.11.0 | [email protected] | Release Notes |
| https://github.com/open-webui/open-webui/security/advisories/GHSA-rffm-9q57-q649 | [email protected] | ExploitPatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | >= 0.6.34, < 0.11.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 18, 2026 | Initial Analysis | [email protected] |
| Aug 5, 2026 | CVE Modified | CISA-ADP |
| Aug 4, 2026 | New CVE Received | [email protected] |