CyberRota Analysis
AI-GeneratedThe vulnerability affects the Open WebUI platform versions 0.9.6 to 0.11.0 when using the Playwright web loader, allowing authenticated users to exploit insufficient validation of sub-resource requests. This flaw can lead to unauthorized access to internal addresses, potentially exposing sensitive data in web searches or retrieval-augmented generation (RAG) outputs. Organizations using affected versions should prioritize updating to version 0.11.0 to mitigate the risk of data leakage and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until 0.11.0, with WEB_LOADER_ENGINE=playwright, the Playwright web loader validates only the top-level page request and lets sub-resource requests pass unvalidated. A page supplied by an authenticated user can use JavaScript to reach blocked internal addresses, and returned DOM can include data read from those addresses in web-search or RAG output. This issue is fixed in 0.11.0.