A high-severity Server-Side Request Forgery vulnerability in Open WebUI allows authenticated attackers to perform unauthorized internal network requests and access sensitive cloud metadata.

The application is susceptible to CWE-918: Server-Side Request Forgery (SSRF). Any authenticated user can trigger the server to perform arbitrary HTTP requests, enabling access to internal services or cloud provider metadata endpoints.

The ability to perform SSRF poses a significant risk to the internal network infrastructure. An attacker can leverage this flaw to bypass firewall protections, scan internal assets, or steal sensitive cloud instance metadata, which could lead to full compromise of the hosting environment. Given the CVSS score of 8.5, this vulnerability represents a high risk to confidentiality and data security.

Immediate Action: Upgrade Open WebUI to version 0.6.37 or later to resolve the underlying SSRF vulnerability.

Proactive Monitoring: Review web server access logs for anomalous outbound requests to unexpected internal IP addresses or cloud metadata services.

Compensating Controls: Implement strict network egress filtering on the host server to prevent it from initiating unauthorized connections to sensitive internal subnets or cloud metadata APIs.

Public Exploit Available: Unknown.

Due to the potential for internal network reconnaissance and cloud metadata exfiltration, this vulnerability poses a substantial risk to organizational security. Administrators should prioritize updating to version 0.6.37 immediately to eliminate this attack vector. If patching is not immediately feasible, ensure that the application container or host is isolated from sensitive internal network segments and cloud metadata endpoints.