{
 "id": "AIR-2026-0916",
 "slug": "cve-2026-87996-open-webui-ssrf-via-dns-rebinding-in-playwrig",
 "title": "CVE-2026-87996: Open WebUI SSRF via DNS Rebinding in Playwright Loader",
 "summary": "An SSRF vulnerability existed in Open WebUI when using the Playwright web loader due to secondary hostname resolutions bypassing initial safety checks. Attackers could exploit DNS rebinding to target internal services.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "Open WebUI"
 ],
 "incident_date": "2026-09-10",
 "incident_date_precision": "day",
 "first_reported": "2026-09-09",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87996",
   "publisher": "NVD",
   "title": "CVE-2026-87996: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.",
   "published_at": "2026-09-09"
  },
  {
   "url": "https://github.com/advisories/GHSA-4v28-j6q3-5m4r",
   "publisher": "GitHub Advisory Database",
   "title": "CVE-2026-87996: Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader",
   "published_at": "2026-09-10"
  }
 ],
 "source_count": 2,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_ghsa",
 "tags": [
  "CVE-2026-87996",
  "ssrf",
  "dns-rebinding",
  "open-webui"
 ],
 "created_at": "2026-10-18T07:00:14.101Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}