Server-Side Request Forgery Vulnerability in Open-WebUI by OpenAI
CVE-2024-7959

7.7HIGH

Key Information:

Vendor
Open-webui
Status
Open-webui/open-webui
Vendor
CVE Published:
20 March 2025

Summary

The Open-WebUI product from OpenAI contains a vulnerability in its /openai/models endpoint in version 0.3.8 that is susceptible to Server-Side Request Forgery (SSRF). This flaw enables attackers to modify the OpenAI URL to any arbitrary URL without adequate validation, facilitating unauthorized requests to internal services. Exploiting this vulnerability could potentially allow an attacker to access sensitive instance secrets and perform command execution, raising significant concerns regarding the security of internal infrastructure.

Affected Version(s)

open-webui/open-webui <= unspecified

References

https://huntr.com/bounties/3c8bea0a-d678-4d67-bb9c-2b5b61...

CVSS V3.0

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.