CVE-2026-54018: Open WebUI SSRF Protection Bypass via HTTP Redirects

# CVE-2026-54018: Open WebUI SSRF Protection Bypass via HTTP Redirects

https://gcdradar.vercel.app/incidents/cve-2026-54018-open-webui-ssrf-protection-bypass-via-http-re · AIR-2026-0769 · closed 2026-06-17

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-06-17
- AI role: Attack on AI
- Products: Open WebUI
- CVE ids: CVE-2026-54018
- CVSS: 7.7

## Summary

An SSRF protection bypass vulnerability in Open WebUI allows attackers to access internal network addresses by exploiting HTTP redirects in the Playwright web loader. No exploitation in the wild has been confirmed.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-06-23: CVE-2026-54018: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. (https://nvd.nist.gov/vuln/detail/CVE-2026-54018)
- 2026-06-17: CVE-2026-54018: Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects (https://github.com/advisories/GHSA-jrfp-m64g-pcwv)

## Sources

- 2026-06-17 GitHub Advisory Database: CVE-2026-54018: Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects https://github.com/advisories/GHSA-jrfp-m64g-pcwv
- 2026-06-23 NVD: CVE-2026-54018: Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. https://nvd.nist.gov/vuln/detail/CVE-2026-54018

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.