CVE-2026-56399: Open WebUI - Server-Side Request Forgery via Location Redirect in /api/v1/retrieval/process/web
Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpoint that allows authenticated users to bypass SSRF protections. Attackers can manipulate URL parameters with location redirect headers to access internal services and potentially execute commands via instance secrets.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-56399?
The severity of CVE-2026-56399 is classified as medium with a CVSS score of 5.
How do I fix CVE-2026-56399?
To fix CVE-2026-56399, update Open WebUI to version 0.6.27 or later.
What kind of attack does CVE-2026-56399 enable?
CVE-2026-56399 enables server-side request forgery (SSRF) attacks through the /api/v1/retrieval/process/web endpoint.
Who is affected by CVE-2026-56399?
Authenticated users of Open WebUI versions prior to 0.6.27 are affected by CVE-2026-56399.
What impact can CVE-2026-56399 have on systems?
CVE-2026-56399 can allow attackers to bypass SSRF protections and access internal services, potentially leading to sensitive data exposure.