Vulnerability Description
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.7.2 and below contain a Blind Server Side Request Forgery in the functionality that allows editing an image via a prompt. The affected function performs a GET request to a user-provided URL with no restriction on the domain, allowing the local address space to be accessed. Since the SSRF is blind (the response cannot be read), the primary impact is port scanning of the local network, as whether a port is open can be determined based on whether the GET request succeeds or fails. These response differentials can be automated to iterate through the entire port range and identify open ports. If the service running on an open port can be inferred, an attacker may be able to interact with it in a meaningful way, provided the service offers state-changing GET request endpoints. This issue was unresolved at the time of publication.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Openwebui | Open Webui | <= 0.7.2 |
Related Weaknesses (CWE)
References
- https://github.com/open-webui/open-webui/security/advisories/GHSA-jgx9-jr5x-mvpvExploitMitigationVendor Advisory
- https://github.com/open-webui/open-webui/security/advisories/GHSA-jgx9-jr5x-mvpvExploitMitigationVendor Advisory
FAQ
What is CVE-2026-34225?
CVE-2026-34225 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.7.2 and below contain a Blind Server Side Request Forgery in the functionality that allows...
How severe is CVE-2026-34225?
CVE-2026-34225 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-34225?
Check the references section above for vendor advisories and patch information. Affected products include: Openwebui Open Webui.