Blind Server-Side Request Forgery in Open WebUI Affecting Self-Hosted AI Platforms
CVE-2026-45347

4.3MEDIUM

Key Information:

Vendor

Open-webui

Status
Open-webui
Vendor
CVE Published:
15 May 2026

What is CVE-2026-45347?

A vulnerability exists in Open WebUI versions prior to 0.5.11, where the PDF generation feature allows for a blind server-side request forgery (SSRF). While most unsafe tags are blocked, an attacker can exploit this through an image tag, initiating unintended requests to the server. This poses a risk of exposing sensitive server-side resources. The issue has been addressed in version 0.5.11, ensuring a more secure PDF export process.

Affected Version(s)

open-webui < 0.5.11

References

https://github.com/open-webui/open-webui/security/advisor...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.