{
 "id": "AIR-2026-0694",
 "slug": "cve-2026-45338-open-webui-vulnerable-to-ssrf-via-oauth-profi",
 "title": "CVE-2026-45338: Open WebUI Vulnerable to SSRF via OAuth Profile Picture",
 "summary": "A server-side request forgery vulnerability exists in Open WebUI where arbitrary URLs from OAuth picture claims are fetched without validation. This allows attackers to force internal HTTP requests and exfiltrate data.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-05-14",
 "incident_date_precision": "day",
 "first_reported": "2026-05-14",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-24c9-2m8q-qhmh",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-45338: Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)",
   "published_at": "2026-05-14"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45338",
   "publisher": "NVD",
   "title": "CVE-2026-45338: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.",
   "published_at": "2026-05-15"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-45338",
  "ssrf"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}