CVE-2024-7959: Open-WebUI SSRF Vulnerability in open-webui Package
Summary
CVE-2024-7959: Open WebUI has SSRF in /openai/models. Affects open-webui versions < 0.3.8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Open-WebUI is a web-based user interface designed to interact with OpenAI models, providing users with a streamlined way to access and utilize AI functionalities. The package is built on Python and is available through the PyPI ecosystem. It allows developers to integrate AI capabilities into their applications easily. However, a critical vulnerability has been identified in version 0.3.8, which exposes the application to Server-Side Request Forgery (SSRF) attacks.
Vulnerability Detail
The vulnerability exists in the '/openai/models' endpoint of the open-webui package, where an attacker can manipulate the OpenAI URL parameter without any validation. This flaw allows the attacker to redirect requests to arbitrary URLs, potentially accessing internal services and sensitive data. The implications of this vulnerability are severe, as it could lead to unauthorized access to internal systems, data leakage, and even command execution if instance secrets are exposed.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary measure, you can restrict access to the '/openai/models' endpoint by implementing network-level controls or by using a web application firewall (WAF) to filter requests. Additionally, consider validating and sanitizing the input parameters to prevent unauthorized URL manipulation.
Conclusion
The SSRF vulnerability in the open-webui package poses significant risks to applications utilizing this package. It is crucial for developers to update to the latest version and implement necessary security measures to protect their systems from potential exploitation.
See every vulnerability recorded for open-webui →
FAQ
Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to send crafted requests from a vulnerable server to internal or external resources, potentially exposing sensitive information.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities without requiring any signup.
The risks include unauthorized access to internal services, data leakage, and potential command execution, which could compromise the security of your application and its data.
Yes, a patch is available. Update the open-webui package to a version higher than 0.3.8 to mitigate the SSRF vulnerability.
The CVSS score for this vulnerability is 7.7, indicating a high severity level that requires immediate attention.
References
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
