CVE-2025-65958

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side Request Forgery (SSRF) vulnerability in Open WebUI allows any authenticated user to force the server to make HTTP requests to arbitrary URLs. This can be exploited to access cloud metadata endpoints (AWS/GCP/Azure), scan internal networks, access internal services behind firewalls, and exfiltrate sensitive information. No special permissions beyond basic authentication are required. This vulnerability is fixed in 0.6.37.

• CWE-918

• https://github.com/open-webui/open-webui/commit/02238d3113e966c353fce18f1b65117380896774Patch
• https://github.com/open-webui/open-webui/security/advisories/GHSA-c6xv-rcvw-v685Exploit, Vendor Advisory
• https://github.com/open-webui/open-webui/security/advisories/GHSA-c6xv-rcvw-v685Exploit, Vendor Advisory

Published

Dec 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-65952Console is a network used to control Gorilla Tag mods' users…8.7
• CVE-2025-65953NanoMQ MQTT Broker (NanoMQ) is an all-around Edge Messaging …6
• CVE-2025-65954SimpleSAMLphp-casserver is a CAS 1.0 and 2.0 compliant CAS s…6.1
• CVE-2025-65955ImageMagick is free and open-source software used for editin…6.1
• CVE-2025-65956Formwork is a flat file-based Content Management System (CMS…5.4
• CVE-2025-65957Core Bot Is an Open Source discord bot made for maple hospit…8.8
• CVE-2025-65959Open WebUI is a self-hosted artificial intelligence platform…5.4
• CVE-2025-6596Improper Neutralization of Input During Web Page Generation …0
• CVE-2025-65960Contao is an Open Source CMS. From version 4.0.0 to before 4…6.6
• CVE-2025-65961Contao is an Open Source CMS. From version 4.0.0 to before 4…4.8
• CVE-2025-65962Tuleap is a free and open source suite for management of sof…4.3
• CVE-2025-65963Files is a module for managing files inside spaces and user …5.4