{"uuid": "842b98cb-1acb-4ce6-9f2d-b8b239c2950b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-8x5v-cpv7-8jjp", "type": "seen", "source": "https://gist.github.com/alon710/a07f9786cabb1f06c1eba431ddd448e4", "content": "# CVE-2026-70485: CVE-2026-70485: Server-Side Request Forgery in Open WebUI via NAT64 IP Wrapping Bypass\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-70485\n\n## Summary\nOpen WebUI is susceptible to Server-Side Request Forgery (SSRF) when deployed in networks with NAT64 translation gateways. Authenticated users can bypass host validation checks by encapsulating internal or cloud-metadata IPv4 addresses within globally-routable IPv6 transition prefixes.\n\n## TL;DR\nAn SSRF vulnerability in Open WebUI allows authenticated users to access cloud metadata and internal assets by wrapping private IPv4 addresses in a NAT64 IPv6 prefix.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 7.1 (High)\n- **Exploit Status**: Proof-of-Concept / Theoretical Analysis\n- **CISA KEV Status**: Not Listed\n- **Impact**: Information Disclosure / Confidentiality Bypass\n\n## Affected Systems\n\n- Open WebUI Deployments utilizing NAT64 gateways or dual-stack transition networks\n- **open-webui**: >= 0.9.0, < 0.11.0 (Fixed in: `0.11.0`)\n\n## Mitigation\n\n- Upgrade Open WebUI backend to version 0.11.0 or higher\n- Disable local web ingestion entirely via system configuration\n- Implement cloud security group rules to block outgoing traffic to link-local metadata endpoints\n\n**Remediation Steps:**\n1. Update your deployment manifest or container image to point to tag 0.11.0 or higher.\n2. If unable to upgrade immediately, set the environment variable ENABLE_LOCAL_WEB_FETCH=False to disable external fetching.\n3. Deploy network policies to restrict access to local private network subnets (RFC 1918) and cloud link-local metadata (169.254.169.254).\n\n## References\n\n- [GitHub Advisory (GHSA-8x5v-cpv7-8jjp)](https://github.com/open-webui/open-webui/security/advisories/GHSA-8x5v-cpv7-8jjp)\n- [Open WebUI Release v0.11.0](https://github.com/open-webui/open-webui/releases/tag/v0.11.0)\n- [Backend Validation Fix Commit](https://github.com/open-webui/open-webui/commit/1717b493d83c86afa82aa8bc50139250852dd2f3)\n- [CVE Official Record Page](https://www.cve.org/CVERecord?id=CVE-2026-70485)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-70485) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-04T20:31:40.506657Z"}