CVE-2026-70479: Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader

With the Playwright web loader enabled, Open WebUI opens user-submitted URLs in a real browser and validates the destination address before allowing the request. That check only ran for the top-level page request. Every other request the page issued was passed through unvalidated, so a page could use its own JavaScript to reach addresses the validation exists to block. Because the loader returns the page’s final DOM to the requesting user, anything the page read back from those addresses ends up in the web-search or RAG output.