{"vulnerability": "cve-2026-7048", "sightings": [{"uuid": "66053cec-2765-45b6-971d-c84d914730fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70485", "type": "seen", "source": "https://gist.github.com/alon710/a07f9786cabb1f06c1eba431ddd448e4", "content": "# CVE-2026-70485: CVE-2026-70485: Server-Side Request Forgery in Open WebUI via NAT64 IP Wrapping Bypass\n\n> **CVSS Score:** 7.1\n> **Published:** 2026-08-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-70485\n\n## Summary\nOpen WebUI is susceptible to Server-Side Request Forgery (SSRF) when deployed in networks with NAT64 translation gateways. Authenticated users can bypass host validation checks by encapsulating internal or cloud-metadata IPv4 addresses within globally-routable IPv6 transition prefixes.\n\n## TL;DR\nAn SSRF vulnerability in Open WebUI allows authenticated users to access cloud metadata and internal assets by wrapping private IPv4 addresses in a NAT64 IPv6 prefix.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network (AV:N)\n- **CVSS Score**: 7.1 (High)\n- **Exploit Status**: Proof-of-Concept / Theoretical Analysis\n- **CISA KEV Status**: Not Listed\n- **Impact**: Information Disclosure / Confidentiality Bypass\n\n## Affected Systems\n\n- Open WebUI Deployments utilizing NAT64 gateways or dual-stack transition networks\n- **open-webui**: >= 0.9.0, < 0.11.0 (Fixed in: `0.11.0`)\n\n## Mitigation\n\n- Upgrade Open WebUI backend to version 0.11.0 or higher\n- Disable local web ingestion entirely via system configuration\n- Implement cloud security group rules to block outgoing traffic to link-local metadata endpoints\n\n**Remediation Steps:**\n1. Update your deployment manifest or container image to point to tag 0.11.0 or higher.\n2. If unable to upgrade immediately, set the environment variable ENABLE_LOCAL_WEB_FETCH=False to disable external fetching.\n3. Deploy network policies to restrict access to local private network subnets (RFC 1918) and cloud link-local metadata (169.254.169.254).\n\n## References\n\n- [GitHub Advisory (GHSA-8x5v-cpv7-8jjp)](https://github.com/open-webui/open-webui/security/advisories/GHSA-8x5v-cpv7-8jjp)\n- [Open WebUI Release v0.11.0](https://github.com/open-webui/open-webui/releases/tag/v0.11.0)\n- [Backend Validation Fix Commit](https://github.com/open-webui/open-webui/commit/1717b493d83c86afa82aa8bc50139250852dd2f3)\n- [CVE Official Record Page](https://www.cve.org/CVERecord?id=CVE-2026-70485)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-70485) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-04T20:31:40.455483Z"}, {"uuid": "616e997e-e39a-49ec-a608-e3063916f409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70485", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-8x5v-cpv7-8jjp", "content": "", "creation_timestamp": "2026-08-04T20:35:03.662932Z"}, {"uuid": "d579d176-d67c-4b7e-bef0-d988731aaedb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70480", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-rffm-9q57-q649", "content": "", "creation_timestamp": "2026-08-04T20:35:07.132836Z"}, {"uuid": "04669401-abff-4b76-b8d1-c1b06e47feeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70483", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-3vf6-64vr-3g56", "content": "", "creation_timestamp": "2026-08-04T20:35:09.321987Z"}, {"uuid": "b89357ea-899d-4d61-b7f6-d4731802869b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70482", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-rq84-p6rr-vf89", "content": "", "creation_timestamp": "2026-08-04T20:35:12.256005Z"}, {"uuid": "c0230d5c-5312-4aa5-9be8-41ce26eb47d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70481", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-mj5r-jf49-m3w7", "content": "", "creation_timestamp": "2026-08-04T20:35:14.428840Z"}, {"uuid": "de9d37f0-d948-4719-8d81-e6bee7ee801c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70482", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvtad5cd2n", "content": "\ud83d\udfe0 CVE-2026-70482 - High (8.1)\n\nOpen WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-70482/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T21:00:39.256139Z"}, {"uuid": "9bf4b1f9-3593-4cf5-87e4-538e9f8c87ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-70486", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3msbvth5jkk2n", "content": "\ud83d\udfe0 CVE-2026-70486 - High (8.2)\n\nOpen WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-70486/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-04T21:00:46.417884Z"}, {"uuid": "78eb6834-aaf6-4ead-a018-8c3865d9bbaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70489", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-73cq-mcgh-379c", "content": "", "creation_timestamp": "2026-08-04T22:35:14.784617Z"}, {"uuid": "47768b1a-f4bc-4481-afcd-c8f56186086f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-70486", "type": "published-proof-of-concept", "source": "https://github.com/open-webui/open-webui/security/advisories/GHSA-3xpf-xq7r-v8c5", "content": "", "creation_timestamp": "2026-08-04T22:35:16.976423Z"}, {"uuid": "b2b0d2ea-b5de-4f91-9855-a9a0df0fb050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmvwyyydmm2q", "content": "CVE-2026-7048 - Photo Gallery by 10Web\nCVE ID : CVE-2026-7048\n \n Published : May 28, 2026, 9:16 a.m. | 50\u00a0minutes ago\n \n Description : The Photo Gallery by 10Web \u2013 Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order...", "creation_timestamp": "2026-05-28T11:43:51.348752Z"}, {"uuid": "d03e64c5-120b-4bc8-9a99-bbe75d216865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7048", "type": "seen", "source": "https://bsky.app/profile/donwebmedia.bsky.social/post/3mmxs66iord2k", "content": "CVE-2026-7048: SQL Injection en Photo Gallery by 10Web\n\n#cve20267048 #photogallery10web #inyecci\u00f3nsqlwordpress #order_byvulnerabilidad #pluginswordpressseguridad", "creation_timestamp": "2026-05-29T05:22:35.875460Z"}]}