{"uuid": "f73e360e-d605-4db2-bfc7-fa37665513c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-88001", "type": "seen", "source": "https://gist.github.com/alon710/855b51c2ea136c7c49beab7d27d1ef40", "content": "# CVE-2026-88001: CVE-2026-88001: Server-Side Request Forgery via Redirect Bypass in Open WebUI\n\n> **CVSS Score:** 5.0\n> **Published:** 2026-09-09\n> **Full Report:** https://cvereports.com/reports/CVE-2026-88001\n\n## Summary\nServer-Side Request Forgery (SSRF) vulnerability in Open WebUI (v0.9.5 to v0.11.1) allows authenticated users to bypass private IP and host filter lists by abusing HTTP redirect handling or using IP literals with the aiohttp client.\n\n## TL;DR\nAn SSRF vulnerability in Open WebUI allows authenticated attackers to bypass network access controls and fetch internal resources or cloud metadata via crafted redirects and direct IP literals.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 5.0\n- **Impact**: Low Confidentiality / Information Disclosure\n- **Exploit Status**: Proof of Concept (PoC)\n- **CISA KEV Status**: Not Listed\n- **Ransomware Use**: No Known Association\n\n## Affected Systems\n\n- Open WebUI v0.9.5 through v0.11.0 deployments\n- **open-webui**: >= 0.9.5, < 0.11.1 (Fixed in: `v0.11.1`)\n\n## Mitigation\n\n- Upgrade Open WebUI to version v0.11.1 or higher.\n- Ensure destination-level filtering is offloaded to the egress gateway when operating behind a forward proxy.\n- Disable local web fetching by verifying that ENABLE_LOCAL_WEB_FETCH is set to False.\n\n**Remediation Steps:**\n1. Identify current running version of Open WebUI.\n2. Pull the latest Docker image: docker pull ghcr.io/open-webui/open-webui:main\n3. Restart the container using the updated image.\n4. Verify that the version matches v0.11.1 or higher.\n5. If using an external forward proxy, update its egress access control list to explicitly block private ranges (RFC 1918, RFC 1122, loopback) and metadata IP 169.254.169.254.\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-88001) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-10T01:32:33.286595Z"}