CVE-2026-45338CWE-918

Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)

High · published May 15, 2026

CVSS v3.1
7.7
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, a Server-Side Request Forgery (SSRF) vulnerability exists in _process_picture_url() in backend/open_webui/utils/oauth.py (line ~1338). The function fetches arbitrary URLs from OAuth picture claims without applying validate_url(), allowing an attacker to force the server to make HTTP requests to internal resources and exfiltrate the full response. This vulnerability is fixed in 0.9.0.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00382 · 31.1th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-05-15T21:46Z
EPSS history
Timeline
  • 15 MAY 21:46Z
    Open WebUI: SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
    cvelistv5