Executive Summary

CVE-2026-54008 is a Server-Side Request Forgery (SSRF) vulnerability in the Open WebUI application, specifically in the OAuth _process_picture_url function.

The vulnerability occurs because the function validates only the initial URL but does not prevent redirects when fetching the profile image URL. Since aiohttp.ClientSession.get() is called without disabling redirects, an attacker with a valid OAuth identity can submit a public URL that redirects (via HTTP 302) to an internal address.

This allows the attacker to read internal responses from services that are normally inaccessible externally by having the internal response returned as their profile image URL content.

The issue affects Open WebUI versions 0.9.5 and earlier and is fixed in version 0.9.6 by properly controlling redirects.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized disclosure of sensitive internal information by allowing an attacker to read internal service responses that should be protected.

An attacker with a valid OAuth identity can exploit this SSRF to access internal infrastructure such as cloud metadata services, localhost-bound services, or other RFC1918 internal network resources.

The impact includes a high confidentiality breach (CVSS score 8.5), potentially exposing sensitive data that could be used for further attacks or information gathering.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by monitoring OAuth profile image URL fields for suspicious URLs that cause redirects to internal addresses. Since the exploit involves submitting a public URL that redirects internally, inspecting logs or network traffic for such redirect patterns can help identify attempts.

Commands to detect this might include searching application logs or network captures for OAuth profile image URL requests that result in 3xx HTTP status codes redirecting to internal IP ranges (e.g., 10.x.x.x, 192.168.x.x, 127.0.0.1).

• Use grep or similar tools to find redirect URLs in logs: grep -E 'profile_image_url.*http.*' /path/to/logs
• Use curl with verbose output to test URLs submitted as profile images for unexpected redirects: curl -v <profile_image_url>
• Monitor network traffic for HTTP 3xx responses redirecting to internal IP addresses using tools like tcpdump or Wireshark.

Useful 0 Not Useful 0

Mitigation Strategies

The immediate mitigation is to upgrade Open WebUI to version 0.9.6 or later, where the vulnerability is fixed.

If upgrading is not immediately possible, a temporary workaround involves modifying the code to explicitly set the aiohttp.ClientSession.get() call with allow_redirects=False or to implement manual redirect handling with re-validation of each redirect URL.

Additionally, review OAuth configurations such as ENABLE_OAUTH_SIGNUP and OAUTH_UPDATE_PICTURE_ON_LOGIN to limit exposure.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows an attacker with a valid OAuth identity to perform Server-Side Request Forgery (SSRF), enabling them to access internal resources and read sensitive internal response data. Such unauthorized access to internal data can lead to confidentiality breaches.

Confidentiality breaches caused by this vulnerability could impact compliance with data protection regulations and standards such as GDPR and HIPAA, which require strict controls to protect sensitive and personal data from unauthorized access.

Therefore, exploitation of this vulnerability may result in violations of these regulations due to exposure of internal and potentially sensitive information.

Useful 0 Not Useful 0