Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, WEB_FETCH_FILTER_LIST matching compared configured host entries against URL strings and non-label-boundary suffixes, allowing path-based blocklist bypasses such as !internal.example.com in a URL path and sibling-domain matches that did not reflect the intended hostname policy. This issue is fixed in version 0.10.0.
Published: 2026-07-09
Score: 4.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Open WebUI enforces host allow/block filtering by matching configured host entries against URL strings. Before version 0.10.0 the comparison did not honour label boundaries; attackers could craft URLs containing suffixes such as "!internal.example.com" inside the path or exploit sibling‑domain matches. This flaw permitted requests to hosts that should have been blocked, allowing potential access to internal resources. The weakness is classified as CWE‑693, a request validation error.

Affected Systems

The vulnerability affects the open‑webui platform of any version older than 0.10.0, when the WEB_FETCH_FILTER_LIST setting is in use.

Risk and Exploitability

With a CVSS base score of 4.3 the risk is moderate. The EPSS score is reported as < 1 %, indicating exploitation is currently unlikely, and the issue is not listed in the CISA KEV catalog. Attackers can exercise this through the web interface without elevated privileges; a malicious URL can bypass the intended blocklist and reach otherwise prohibited hosts.

Generated by OpenCVE AI on July 29, 2026 at 12:11 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Open WebUI v0.10.0 patch to enforce correct host filtering.
  • Review the WEB_FETCH_FILTER_LIST configuration to ensure only intended host patterns are allowed and that label boundaries are respected.
  • Monitor access logs for unexpected URL patterns or attempts to access internal hosts.

Generated by OpenCVE AI on July 29, 2026 at 12:11 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Github GHSA Github GHSA GHSA-qg3f-8x3j-ggf2 Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching
History

Thu, 09 Jul 2026 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Open-webui
Open-webui open-webui
Vendors & Products Open-webui
Open-webui open-webui

Thu, 09 Jul 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 09 Jul 2026 17:15:00 +0000

Type Values Removed Values Added
Description Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, WEB_FETCH_FILTER_LIST matching compared configured host entries against URL strings and non-label-boundary suffixes, allowing path-based blocklist bypasses such as !internal.example.com in a URL path and sibling-domain matches that did not reflect the intended hostname policy. This issue is fixed in version 0.10.0.
Title Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching
Weaknesses CWE-693
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'}

Subscriptions

Open-webui Open-webui
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-07-09T17:53:06.003Z

Reserved: 2026-07-02T21:05:02.925Z

Link: CVE-2026-59223

cve-icon Vulnrichment

Updated: 2026-07-09T17:52:59.903Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-29T12:15:03Z

Weaknesses
  • CWE-693

    Protection Mechanism Failure