●PocketClawAI security alerts
Sign in
mediumCVSS 5NVD status: Deferred

CVE-2026-56399

Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpoint that allows authenticated users to bypass SSRF protections.

ComponentOpen WebUI
Severitymedium (CVSS 5)
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Published (NVD)2026-06-30
Last modified2026-07-02
Affected versions
< 0.6.27
read from the advisory text: NVD has not published CPE data yet
Fixed in0.6.27
WeaknessCWE-918
CISA KEVnot listed

NVD description

Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpoint that allows authenticated users to bypass SSRF protections. Attackers can manipulate URL parameters with location redirect headers to access internal services and potentially execute commands via instance secrets.

Does CVE-2026-56399 hit the version you run?Paste your docker-compose.yml, requirements.txt or package.json. The scanner checks your pinned versions against this CVE and every other one we track for Open WebUI.
Check my stack

What to do

  • Upgrade Open WebUI to 0.6.27 or later.
  • Do not expose the component's API or UI to the internet without authentication in front of it.

Sources

Read more

Other Open WebUI CVEs

medium
CVE-2026-109288CVSS 6.4

Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link UR...

Open WebUI
2026-10-12medium
CVE-2026-109284CVSS 4.3

Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in...

Open WebUI
2026-10-12medium
CVE-2026-109283CVSS 5.4

Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only fro...

Open WebUI
2026-10-12high
CVE-2026-109286CVSS 8.1

Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to stea...

Open WebUI
2026-10-12medium
CVE-2026-109285CVSS 5

Open WebUI from 0.6.0 before 0.11.4 contains an improper access control vulnerability in has_access_to_file that lets former knowledge base...

Open WebUI
2026-10-12medium
CVE-2026-109287CVSS 4.3

Open WebUI from 0.9.6 before 0.11.4 contains an authorization flaw where the knowledge base file listing does not verify that a supplied dir...

Open WebUI
2026-10-12

All Open WebUI CVEs