{
 "id": "AIR-2026-0051",
 "slug": "cve-2026-70485-open-webui-vulnerable-to-ssrf-through-nat64-i",
 "title": "CVE-2026-70485: Open WebUI vulnerable to SSRF through NAT64 IPv6 encoding",
 "summary": "From version 0.9.0 to 0.11.0, Open WebUI failed to properly check embedded IPv4 addresses in NAT64 transition encodings during URL validation. This enabled users to bypass restrictions and access internal resources via RAG ingestion.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-08-04",
 "incident_date_precision": "day",
 "first_reported": "2026-08-04",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-70485",
   "publisher": "NVD",
   "title": "CVE-2026-70485: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.",
   "published_at": "2026-08-04"
  },
  {
   "url": "https://github.com/advisories/GHSA-8x5v-cpv7-8jjp",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-70485: Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs",
   "published_at": "2026-08-04"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-70485",
  "open-webui",
  "ssrf"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T07:00:14.101Z"
}