Server-Side Request Forgery (SSRF) in Open WebUI - CVE-2025-65958
Published: April 24, 2026
Vulnerability identifier: #VU127471
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:L/SI:N/SA:N]
CVE-ID: CVE-2025-65958
CWE-ID: CWE-918
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to access internal services and disclose sensitive information.
The vulnerability exists due to server-side request forgery (ssrf) in /api/v1/retrieval/process/web when processing a user-supplied URL. A remote user can send a specially crafted request containing an arbitrary URL to access internal services and disclose sensitive information.
No special permissions beyond basic authentication are required, and cloud metadata endpoints may be reachable in affected deployments.
Affected software
Open WebUI
How to mitigate CVE-2025-65958
Install security update from vendor's website.
Open WebUI - update to 0.9.5