PT-2026-41173 · Unknown · Open-Webui
Published
2026-04-21
·
Updated
2026-05-16
·
CVE-2026-45338
CVSS v3.1
7.7
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Open WebUI versions prior to 0.9.0
Description
A Server-Side Request Forgery (SSRF) issue exists in the
process picture url() function within backend/open webui/utils/oauth.py. The function fetches URLs from OAuth picture claims without using the validate url() function, allowing an attacker to force the server to make HTTP requests to internal resources and exfiltrate the full response. This can be exploited during new user OAuth signup or when existing user pictures are updated on login. Potential targets include cloud metadata endpoints to steal credentials, internal network services, or localhost-bound services. SSRF is a vulnerability where an attacker can trick a server-side application into making requests to an unintended location.Recommendations
Update to version 0.9.0.
As a temporary workaround, consider restricting the use of the
process picture url() function or disabling the ENABLE OAUTH SIGNUP and OAUTH UPDATE PICTURE ON LOGIN configurations to minimize the risk of exploitation.Exploit
Fix
SSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Open-Webui