CVE-2026-7177

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-7177
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7177.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-7177
Published
2026-04-27T21:45:15.349Z
Modified
2026-07-08T08:14:19.196212224Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery
Details

A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1. Affected by this issue is the function proxyHandler of the file app/api/[provider]/[...path]/route.ts. The manipulation results in server-side request forgery. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-918"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7177.json"
}
References

Affected packages

Git / github.com/chatgptnextweb/nextchat

Affected ranges

Type
GIT
Repo
https://github.com/chatgptnextweb/nextchat
Events
Introduced
377480b448798488db5ef03f4d5c44d2d930693c
Last affected
557a2cce357749c6fb3176d42e03ff6f7de4d355
Database specific 
{
    "extracted_events": [
        {
            "introduced": "2.16.0"
        },
        {
            "last_affected": "2.16.0"
        },
        {
            "introduced": "2.16.1"
        },
        {
            "last_affected": "2.16.1"
        }
    ],
    "cpe": [
        "cpe:2.3:a:nextchat:nextchat:2.16.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:nextchat:nextchat:2.16.1:*:*:*:*:*:*:*"
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ]
}

Affected versions

2.*
2.16.0
2.16.1
v2.*
v2.16.0
v2.16.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7177.json"