Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.1, SafePlaywrightURLLoader in backend/open_webui/retrieval/web/utils.py validated a user-controlled hostname in Python and then let the Playwright browser resolve it again in the sync and async request interceptors. An authenticated user controlling authoritative DNS could return a public address to validation and an internal address to the browser, exposing responses from internal services or cloud metadata through web search or URL ingestion. This issue is fixed in version 0.11.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-09-09 | 1 | General1 |
| 2026-09-10 | 1 | Disclosure1 |
🔴 Open WebUI, DNS Rebinding SSRF, #CVE-2026-87996 (High) -DC-Sep2026-2320 https://dailycve.com/open-webui-dns-rebinding-ssrf-cve-2026-87996-high-dc-sep2026-2320/
Post summary
The article announces a new high‑severity DNS rebinding SSRF vulnerability in Open WebUI (CVE‑2026‑87996), offering basic technical details but no PoC, exploit, or patch information.
CVE-2026-87996 Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.1, SafePlaywrightURLLoader in backend/open_webui/retrieval… https://www.cve.org/CVERecord?id=CVE-2026-87996
Post summary
The text only identifies CVE-2026-87996 with minimal context, lacking evidence of exploitation, patching, or detailed vulnerability description.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openwebui | open_webui | - | - | - |