Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/open_webui/retrieval/web/utils.py treated Python's globally routable address classification as proof that a destination was external. An authenticated user could make an Azure-hosted instance fetch and return content from 168.63.129.16, the Azure platform channel, as well as other reserved ranges that the standard classification did not reject. This issue is fixed in version 0.11.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-09-09 | 1 | Disclosure1 |
| 2026-09-10 | 1 | General1 |
CVE-2026-87999 Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/p… https://www.cve.org/CVERecord?id=CVE-2026-87999
Post summary
The text references CVE-2026-87999 for Open WebUI, noting affected API endpoints but provides no details on exploitation, patching, or vulnerability type.
Glad to see one of my findings published as CVE-2026-87999 in Open WebUI @OpenWebUI 🙏 https://github.com/open-webui/open-webui/security/advisories/GHSA-34r3-9m95-vq73
Post summary
The tweet announces a newly published CVE for Open WebUI, linking to an advisory but offering no further exploitation, patch, or technical details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openwebui | open_webui | - | - | - |