An SSRF vulnerability in Open WebUI versions prior to 0.9.0 allows authenticated attackers to perform unauthorized requests to internal resources, posing a critical security risk.

This vulnerability (CWE-918) allows an authenticated attacker to perform Server-Side Request Forgery by manipulating requests to the application. The application fails to properly validate the target host, allowing the attacker to interact with internal services that are not reachable from the public internet.

The CVSS score of 7.7 indicates a high risk. Successful SSRF exploitation can allow an attacker to bypass firewalls, conduct internal reconnaissance, or interact with sensitive internal APIs and metadata services, potentially leading to further compromise of the internal network architecture.

Immediate Action: Update the Open WebUI application to version 0.9.0 or later to ensure the fix for SSRF is implemented.

Proactive Monitoring: Monitor egress traffic from the server hosting Open WebUI for connections to unauthorized internal IP addresses or services.

Compensating Controls: Implement an egress filtering policy (e.g., via a firewall) that limits the server's ability to communicate with internal network segments that are not required for its operation.

Public Exploit Available: Unknown

The severity of this SSRF vulnerability requires immediate patching. Administrators should verify that their Open WebUI instances are not exposed to untrusted networks and that egress traffic is restricted to minimize the potential impact of similar vulnerabilities.