CVE-2024-7959: Open WebUI SSRF Vulnerability in open-webui Package
Summary
CVE-2024-7959: Open WebUI has SSRF in /openai/models. Affects open-webui versions < 0.3.8. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The open-webui package is a web interface designed to interact with OpenAI models, allowing users to easily access and utilize AI functionalities. Version 0.3.8 of this package has been identified as vulnerable to a Server-Side Request Forgery (SSRF) attack, which can lead to unauthorized access to internal services.
Vulnerability Detail
The vulnerability exists in the '/openai/models' endpoint of the open-webui package, where an attacker can manipulate the OpenAI URL parameter without any validation. This allows the attacker to send requests to arbitrary URLs, potentially accessing sensitive internal services and gaining command execution capabilities by retrieving instance secrets. The SSRF vulnerability can lead to severe security breaches, making it critical to address promptly.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can restrict access to the '/openai/models' endpoint by implementing network-level controls or by validating the OpenAI URL parameter to ensure it only points to trusted domains.
Conclusion
The SSRF vulnerability in the open-webui package poses significant risks to applications utilizing this package. It is crucial to update to a patched version to mitigate these risks. Implementing workarounds can provide temporary relief, but a permanent fix through updates is recommended.
See every vulnerability recorded for open-webui →
FAQ
Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to send crafted requests from a vulnerable server to internal or external resources, potentially exposing sensitive information.
If exploited, this vulnerability can allow attackers to access internal services, retrieve sensitive data, and potentially execute commands on your server.
Yes, updating the open-webui package to a version later than 0.3.8 will resolve this vulnerability.
Implement network-level controls to restrict access to the vulnerable endpoint and validate the OpenAI URL parameter to mitigate the risk temporarily.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Related vulnerabilities
Recent vulnerabilities recorded for open-webui.
