CVE-2026-45338: Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)

May 14, 2026 (updated May 19, 2026)

A Server-Side Request Forgery (SSRF) vulnerability exists in _process_picture_url() in backend/open_webui/utils/oauth.py (line ~1338). The function fetches arbitrary URLs from OAuth picture claims without applying validate_url(), allowing an attacker to force the server to make HTTP requests to internal resources and exfiltrate the full response.

References

github.com/advisories/GHSA-24c9-2m8q-qhmh
github.com/open-webui/open-webui/releases/tag/v0.9.0
github.com/open-webui/open-webui/security/advisories/GHSA-24c9-2m8q-qhmh
nvd.nist.gov/vuln/detail/CVE-2026-45338

Code Behaviors & Features

Detect and mitigate CVE-2026-45338 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →