Vulnerability Description
Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpoint that allows authenticated users to bypass SSRF protections. Attackers can manipulate URL parameters with location redirect headers to access internal services and potentially execute commands via instance secrets.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/open-webui/open-webui/commit/02238d3113e966c353fce18f1b651173
- https://github.com/open-webui/open-webui/security/advisories/GHSA-82r6-c5jm-f3mw
- https://www.vulncheck.com/advisories/open-webui-server-side-request-forgery-via-
- https://github.com/open-webui/open-webui/security/advisories/GHSA-82r6-c5jm-f3mw
FAQ
What is CVE-2026-56399?
CVE-2026-56399 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpoint that allows authenticated users to bypass SSRF protections. Attackers can ma...
How severe is CVE-2026-56399?
CVE-2026-56399 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-56399?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.