PYSEC-2026-1743

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/open-webui/PYSEC-2026-1743.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2026-1743

Aliases

Published

2026-07-07T14:34:55.427031Z

Modified

2026-07-07T17:47:59.998337146Z

Severity

7.7 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVSS Calculator

Summary

Open WebUI has SSRF in /openai/models

Details

The /openai/models endpoint in open-webui/open-webui version 0.3.8 is vulnerable to Server-Side Request Forgery (SSRF). An attacker can change the OpenAI URL to any URL without checks, causing the endpoint to send a request to the specified URL and return the output. This vulnerability allows the attacker to access internal services and potentially gain command execution by accessing instance secrets.

References

Affected packages

PyPI / open-webui

Package

Name: open-webui; View open source insights on deps.dev
Purl: pkg:pypi/open-webui

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

0.3.8

Affected versions

0.*

0.1.124

0.1.125

0.2.0

0.2.1

0.2.2

0.2.3

0.2.4

0.2.5

0.3.0

0.3.1

0.3.2

0.3.3

0.3.4

0.3.5

0.3.6

0.3.7

0.3.8

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/open-webui/PYSEC-2026-1743.yaml"