{
 "id": "AIR-2026-0769",
 "slug": "cve-2026-54018-open-webui-ssrf-protection-bypass-via-http-re",
 "title": "CVE-2026-54018: Open WebUI SSRF Protection Bypass via HTTP Redirects",
 "summary": "An SSRF protection bypass vulnerability in Open WebUI allows attackers to access internal network addresses by exploiting HTTP redirects in the Playwright web loader. No exploitation in the wild has been confirmed.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-06-17",
 "incident_date_precision": "day",
 "first_reported": "2026-06-17",
 "sources": [
  {
   "url": "https://github.com/advisories/GHSA-jrfp-m64g-pcwv",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-54018: Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects",
   "published_at": "2026-06-17"
  },
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54018",
   "publisher": "NVD",
   "title": "CVE-2026-54018: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.",
   "published_at": "2026-06-23"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-54018",
  "ssrf",
  "open-webui"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}