CVE-2026-105238: ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery
A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
ChatGPTNextWeb NextChat versions up to and including 2.16.1 are identified as affected, specifically through the Proxy Fallback Handler in app/api/proxy.ts.
What does an attacker need to exploit this issue?
The attack can be initiated remotely without privileges or user interaction. Exploitation involves manipulating the x-base-url argument handled by proxyHandler to induce server-side requests.
Is there public exploitation information?
An exploit has been published and may be used. The reported fix is still awaiting acceptance.
What can be done while a fix is unavailable?
The available information does not provide a documented mitigation. Prioritize limiting exposure of the affected proxy functionality and assess requests that supply or influence the x-base-url argument.