CVE-2026-34225: Open WebUI Blind Server Side Request Forgery in Image Edit Functionality
Summary
CVE-2026-34225: Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality. Affects open-webui versions < 0.7.2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Open WebUI is an open-source web application that provides a user-friendly interface for managing and editing images. It allows users to upload, edit, and manipulate images through various functionalities. However, it has been found to be vulnerable to a blind server-side request forgery (SSRF) issue that can compromise the security of the local network.
Vulnerability Detail
The vulnerability arises from the image editing functionality that accepts user-provided URLs without any restrictions on the domain. This allows an attacker to perform blind SSRF by sending crafted requests to internal services within the local address space. The attacker cannot read the response, but they can infer the status of the request based on whether it fails or succeeds. This can lead to port scanning of the local network, potentially exposing sensitive services and data.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can restrict user input by validating the provided URLs to ensure they do not point to local addresses (e.g., 127.0.0.1, localhost, or any private IP ranges). This can be done by implementing a validation function that checks the URL before processing it.
Conclusion
The Open WebUI package has a critical vulnerability that allows for blind SSRF attacks through its image editing functionality. It is essential to update to the patched version and implement URL restrictions to safeguard against potential exploitation. Regular monitoring for vulnerabilities using tools like Vulert can help maintain application security.
See every vulnerability recorded for open-webui →
FAQ
A blind SSRF vulnerability allows an attacker to send requests to internal services without being able to see the response. They can infer information based on the success or failure of the requests.
This vulnerability can allow attackers to scan your local network for open ports and services, potentially leading to further exploitation of those services.
Yes, the vulnerability has been patched in version 0.7.3 of Open WebUI. It is recommended to update to this version or later.
If you cannot update immediately, implement URL validation to restrict access to local addresses as a temporary measure.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. You can check your application using the Vulert playground without any signup at Vulert Scanner.
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
