CVE-2026-87999CWE-918ssrf

CVE-2026-87999

High · published September 10, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/open_webui/retrieval/web/utils.py treated Python's globally routable address classification as proof that a destination was external. An authenticated user could make an Azure-hosted instance fetch and return content from 168.63.129.16, the Azure platform channel, as well as other reserved ranges that the standard classification did not reject. This issue is fixed in version 0.11.1.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00360 · 28.6th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-09-10T02:18Z
Affected products (1)
ProductVersionsFixed in
openwebui/open_webui< 0.11.10.11.1
References (5)
https://github.com/open-webui/open-webui/commit/e3e4bd87df6fc629e7e22081d980d55a7632b8b7 · [email protected]https://github.com/open-webui/open-webui/pull/27823 · [email protected]https://github.com/open-webui/open-webui/releases/tag/v0.11.1 · [email protected]https://github.com/open-webui/open-webui/security/advisories/GHSA-34r3-9m95-vq73 · [email protected]https://github.com/open-webui/open-webui/security/advisories/GHSA-34r3-9m95-vq73 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 11 SEP 03:19Z
    EPSS moved — → 0%
    epss
  • 09 SEP 21:33Z
    Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
    cvelistv5