CVE-2026-70485: Open WebUI vulnerable to SSRF through NAT64 IPv6 encoding

# CVE-2026-70485: Open WebUI vulnerable to SSRF through NAT64 IPv6 encoding

https://gcdradar.vercel.app/incidents/cve-2026-70485-open-webui-vulnerable-to-ssrf-through-nat64-i · AIR-2026-0051 · closed 2026-08-04

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2026-08-04
- AI role: Attack on AI
- Products: Open WebUI
- CVE ids: CVE-2026-70485
- CVSS: 7.1

## Summary

From version 0.9.0 to 0.11.0, Open WebUI failed to properly check embedded IPv4 addresses in NAT64 transition encodings during URL validation. This enabled users to bypass restrictions and access internal resources via RAG ingestion.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-08-04: CVE-2026-70485: Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs (https://github.com/advisories/GHSA-8x5v-cpv7-8jjp)
- 2026-08-04: CVE-2026-70485: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. (https://nvd.nist.gov/vuln/detail/CVE-2026-70485)

## Sources

- 2026-08-04 NVD: CVE-2026-70485: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. https://nvd.nist.gov/vuln/detail/CVE-2026-70485
- 2026-08-04 GitHub Advisory Database: CVE-2026-70485: Open WebUI: Any authenticated user can reach internal services and cloud metadata via NAT64-encoded URLs https://github.com/advisories/GHSA-8x5v-cpv7-8jjp

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.