CVE-2025-65958

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side Request Forgery (SSRF) vulnerability in Open WebUI allows any authenticated user to force the server to make HTTP requests to arbitrary URLs. This can be exploited to access cloud metadata endpoints (AWS/GCP/Azure), scan internal networks, access internal services behind firewalls, and exfiltrate sensitive information. No special permissions beyond basic authentication are required. This vulnerability is fixed in 0.6.37.

CVSS v3 8.5 HIGH

8.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.1 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References

Link	Resource
https://github.com/open-webui/open-webui/commit/02238d3113e966c353fce18f1b65117380896774	Patch
https://github.com/open-webui/open-webui/security/advisories/GHSA-c6xv-rcvw-v685	Exploit Vendor Advisory
https://github.com/open-webui/open-webui/security/advisories/GHSA-c6xv-rcvw-v685	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*

History

18 Oct 2026, 15:10

Type	Values Removed	Values Added
Summary		(es) Open WebUI es una plataforma de inteligencia artificial autoalojada diseñada para operar completamente sin conexión. Versiones anteriores a 0.6.37, una vulnerabilidad de Server-Side Request Forgery (SSRF) en Open WebUI permite a cualquier usuario autenticado forzar al servidor a realizar peticiones HTTP a URLs arbitrarias. Esto puede ser explotado para acceder a endpoints de metadatos en la nube (AWS/GCP/Azure), escanear redes internas, acceder a servicios internos detrás de firewalls y exfiltrar información sensible. No se requieren permisos especiales más allá de la autenticación básica. Esta vulnerabilidad está corregida en 0.6.37.

Information

Published : 2025-12-04 20:16

Updated : 2026-10-18 15:10

NVD link : CVE-2025-65958

Mitre link : CVE-2025-65958

CVE.ORG link : CVE-2025-65958

JSON object : View

Products Affected

openwebui

open_webui

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2025-65958", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-65958", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-08T20:54:23.029458Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.7, "exploitabilityScore": 3.1}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.2, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "open-webui", "product": "open-webui", "versions": [{"status": "affected", "version": "< 0.6.37"}]}]}], "published": "2025-12-04T20:16:19.973", "references": [{"url": "https://github.com/open-webui/open-webui/commit/02238d3113e966c353fce18f1b65117380896774", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-c6xv-rcvw-v685", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/open-webui/open-webui/security/advisories/GHSA-c6xv-rcvw-v685", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side Request Forgery (SSRF) vulnerability in Open WebUI allows any authenticated user to force the server to make HTTP requests to arbitrary URLs. This can be exploited to access cloud metadata endpoints (AWS/GCP/Azure), scan internal networks, access internal services behind firewalls, and exfiltrate sensitive information. No special permissions beyond basic authentication are required. This vulnerability is fixed in 0.6.37."}, {"lang": "es", "value": "Open WebUI es una plataforma de inteligencia artificial autoalojada dise\u00f1ada para operar completamente sin conexi\u00f3n. Versiones anteriores a 0.6.37, una vulnerabilidad de Server-Side Request Forgery (SSRF) en Open WebUI permite a cualquier usuario autenticado forzar al servidor a realizar peticiones HTTP a URLs arbitrarias. Esto puede ser explotado para acceder a endpoints de metadatos en la nube (AWS/GCP/Azure), escanear redes internas, acceder a servicios internos detr\u00e1s de firewalls y exfiltrar informaci\u00f3n sensible. No se requieren permisos especiales m\u00e1s all\u00e1 de la autenticaci\u00f3n b\u00e1sica. Esta vulnerabilidad est\u00e1 corregida en 0.6.37."}], "lastModified": "2026-10-18T15:10:00.097", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openwebui:open_webui:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "06C81784-9018-4FE9-89EB-18263EA0B16A", "versionEndExcluding": "0.6.37"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}