https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T18:30:36.622263+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331737 EUVD-2026-331737 2026-10-10T18:30:36.625355+00:00 EUVD-2026-331737 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56399 fkie_cve-2026-56399 2026-10-10T18:30:36.625392+00:00

Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpoint that allows authenticated users to bypass SSRF protections. Attackers can manipulate URL parameters with location redirect headers to access internal services and potentially execute commands via instance secrets.

 https://cve.radiocsirt.org/vuln/ghsa-v376-5ppg-xp5v GHSA-v376-5ppg-xp5v 2026-10-10T18:30:36.625427+00:00

Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpoint that allows authenticated users to bypass SSRF protections. Attackers can manipulate URL parameters with location redirect headers to access internal services and potentially execute commands via instance secrets.