CVE-2026-105238

HighCVSS 7.3

Published: 05/10/2026(UTC)Updated: 06/10/2026(UTC)Translated: 05/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Risk Assessment

It is possible to force the server to make requests to internal resources, potentially leading to information disclosure or interaction with internal services.

Recommendation

Update NextChat to a version containing the fix (pull request awaits acceptance), and until then restrict access to the proxy function and validate the x-base-url header.

Other vulnerabilities in NextChat

CVE-2026-82639High
NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server's OpenAI API key. The x-base-url header is validated using substring matching instead of hostname parsing, allowing any URL containing 'api.openai.com' to pass validation and receive the server's credentials in the Authorization header.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS