PT-2026-41177 · Unknown · Open-Webui

Published 2025-02-10 · Updated 2026-05-16 · CVE-2026-45347

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.5.11

Description A blind server side request forgery (SSRF) exists in the PDF generate function. User inputs are interpreted as HTML and embedded into the PDF. While scripts and certain dangerous tags like iFrame and Object are blocked, an image tag can be used to force the server to make outbound GET requests. This can be exploited via the '/api/v1/utils/pdf' endpoint by inserting a payload into the title variable. This issue allows an attacker to trigger arbitrary GET requests and potentially enumerate internal assets through response delays.

Recommendations Update to version 0.5.11 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2026-07201

CVE-2026-45347

GHSA-F776-FP4W-266C

Affected Products

Open-Webui

References · 9

• 🔥 https://github.com/open-webui/open-webui/security/advisories/GHSA-f776-fp4w-266c · Exploit
• https://bdu.fstec.ru/vul/2026-07201 · Security Note
• https://osv.dev/vulnerability/GHSA-f776-fp4w-266c · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-45347 · Security Note
• https://github.com/open-webui/open-webui · Note
• https://github.com/open-webui/open-webui/releases/tag/v0.5.11 · Note
• https://github.com/open-webui/open-webui/commit/167c8bf00d165af523acfc3b870749f6be6d3e57 · Note
• https://twitter.com/CVEnew/status/2055457502557261832 · Twitter Post
• https://t.me/CVEtracker/53984 · Telegram Post