{
 "id": "AIR-2026-0695",
 "slug": "cve-2026-45331-open-webui-ssrf-bypass-in-rag-web-search-feat",
 "title": "CVE-2026-45331: Open WebUI SSRF Bypass in RAG Web Search Feature",
 "summary": "Open WebUI contains an SSRF vulnerability in its RAG web search validation utility due to improperly handled IPv6 and reserved IPv4 ranges. Attackers can bypass URL filtering controls to reach internal network resources.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-05-14",
 "incident_date_precision": "day",
 "first_reported": "2026-05-14",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-4v7r-f4w8-8972",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-45331: Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature",
   "published_at": "2026-05-14"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45331",
   "publisher": "NVD",
   "title": "CVE-2026-45331: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.",
   "published_at": "2026-05-15"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-45331",
  "ssrf",
  "rag"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}