High · published December 5, 2025
⚡ An authenticated user can turn your server into a personal HTTP request machine! The SSRF vulnerability in Open WebUI prior to version 0.6.37 allows this with no special permissions needed. 🔥 This is like a hotel guest who finds a way to sneak into the utility closet and start making calls on the front desk phone, reaching out to anyone they want — external services, internal networks, you name it! If exploited, attackers could access cloud metadata endpoints from providers like AWS, GCP, or Azure, potentially exfiltrating sensitive data or scanning internal networks. Imagine the chaos if they accessed services hidden behind your firewalls or even compromised data! This could lead to devastating security breaches.
This is like a hotel guest who finds a way to sneak into the utility closet and start making calls on the front desk phone, reaching out to anyone they want — external services, internal networks, you name it! This SSRF vulnerability occurs because Open WebUI allows authenticated users to direct the server to make HTTP requests to any URL. By leveraging this flaw, an attacker can trick the server into accessing sensitive internal resources or external services.
If exploited, attackers could access cloud metadata endpoints from providers like AWS, GCP, or Azure, potentially exfiltrating sensitive data or scanning internal networks. Imagine the chaos if they accessed services hidden behind your firewalls or even compromised data! This could lead to devastating security breaches. To mitigate this risk, update Open WebUI to version 0.6.37 immediately. Ensure your server does not allow requests to arbitrary URLs unless absolutely necessary, and consider implementing strict network access controls to limit exposure. You’ve got this! With these steps, you can secure your server and keep your data safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| openwebui/open_webui | < 0.6.37 | 0.6.37 |