CVE-2026-70480
Received Received - Intake

Open WebUI Vega Viewer Same-Origin Request Exposure

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: GitHub, Inc.

Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.34 until 0.11.0, Open WebUI renders vega and vega-lite fenced code blocks in chat content by building a Vega view in the viewer browser without a restricted resource loader. Any user who can place such a block where another user will see it can make that user browser issue attacker-chosen outbound GET requests and read responses from same-origin or CORS-permissive targets into the rendered page. This issue is fixed in 0.11.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-05
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-70480
EUVD
EUVD-2026-52916

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
open_webui open_webui From 0.6.34 (inc) to 0.11.0 (inc)
open_webui open_webui From 0.6.34 (inc) to 0.11.0 (exc)
open_webui open_webui 0.11.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-918 The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a client-side Server-Side Request Forgery (SSRF) vulnerability in Open WebUI versions 0.6.34 to 0.11.0. It allows attackers to embed malicious URLs in Vega or Vega-Lite chart code blocks. When rendered in a victim's browser, these charts trigger outbound GET requests to arbitrary destinations, including internal hosts or same-origin endpoints with permissive CORS headers. The browser fetches these resources, potentially allowing attackers to exfiltrate responses or confirm user interaction.

Detection Guidance

To detect this vulnerability, check if your Open WebUI version is between 0.6.34 and 0.11.0. Run: curl -s https://your-openwebui-instance.com/version | grep version. If the version is within this range, the system is vulnerable.

Impact Analysis

The vulnerability can lead to data leakage from same-origin or CORS-permissive targets. Attackers could read sensitive responses from internal systems or services the victim has access to. It requires the victim to view the crafted message but no further interaction. The impact is limited to client-side data exposure since requests originate from the browser.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection principles or HIPAA's confidentiality requirements. Organizations using affected Open WebUI versions may face compliance violations if sensitive data is exposed through this flaw. Immediate patching is recommended to maintain regulatory compliance.

Mitigation Strategies

Upgrade Open WebUI to version 0.11.0 or later immediately. No additional configuration changes are required beyond the upgrade. This blocks external resource loading in Vega charts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-70480. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart