Open WebUI can reach Azure's internal platform channel

Published September 10, 2026 CVE-2026-87999

Open WebUI could let a logged-in user read responses from Azure's internal platform channel. The issue affects Open WebUI servers hosted on Azure.

Severity
HighCVSS 3.1 · 7.1
Fix
Fixed in 0.11.1Fix recorded yesterday
Affected versions
before 0.11.1
Weakness
CWE-918Server-Side Request Forgery (SSRF)
Exploit likelihood
0.22% in 30 daysEPSS, higher than 12% of known flaws
Affects
open-webui

How it works

  • Open WebUI fetches web addresses on the server for search and document ingestion.
  • Its address check treated Azure's internal platform address as publicly reachable.
  • A verified account could then make the server request that address and return the response through Open WebUI.

What to do

Check the installed package with python3 -m pip show open-webui and compare its version with 0.11.1. Azure-hosted installations below 0.11.1 fall within the affected range.

Run this in the application environment you want to check:

python3 -m pip show open-webui

Upgrade open-webui to version 0.11.1 or later. See the Open WebUI security advisory for the documented fix and deployment details.

Technical details

This is a server-side request forgery issue in Open WebUI's web-fetch features. Before 0.11.1, the address filter could allow 168.63.129.16, an internal endpoint reachable by Azure virtual machines, and return its response to an authenticated user. The advisory says no specific credential or secret was retrieved during the investigation.

Severity breakdown

  • Attack vector Network Requires network access to the vulnerable service
  • Attack complexity High Attack depends on conditions outside the attacker's control
  • Privileges required Low Attacker needs a basic user account
  • User interaction None No victim action needed
  • Scope Changed Impact crosses a security authority boundary
  • Confidentiality impact High Sensitive data can be exposed with serious impact
  • Integrity impact Low Some data can be modified
  • Availability impact None No availability impact
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N Open in FIRST.org calculator

References

View Original Source