Security Advisory

CVE-2026-45400

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-15 20:40:47
Last updated 2026-05-15 21:07:50
Assigner GitHub_M
CVSS score 8.5
State PUBLISHED

Description

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, a parsing difference between the urlparse and requests libraries led to an SSRF bypass vulnerability. This vulnerability is fixed in 0.9.5.