CVE-2026-45331
HighSummary
In versions prior to 0.9.0 of the Open WebUI platform, the validate_url() function improperly validates IPv6 addresses, allowing any address to pass through the filter. Additionally, IPv4-mapped IPv6 addresses and several reserved IPv4 ranges are not blocked.
Risk Assessment
The organization may be exposed to attacks related to unauthorized access to resources, as improper IP address validation could lead to security bypass.
Recommendation
It is recommended to upgrade to version 0.9.0 or later to fix this vulnerability and enhance system security.
Original NVD description (English source)
Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, validate_url() in backend/open_webui/retrieval/web/utils.py calls validators.ipv6(ip, private=True), but the validators library does NOT implement the private keyword for IPv6 — the call raises a ValidationError (which is falsy in a boolean context), so every IPv6 address passes the filter. In addition, IPv4-mapped IPv6 (::ffff:10.0.0.1) bypasses the IPv4 check entirely, and several reserved IPv4 ranges (0.0.0.0/8, 100.64.0.0/10, 192.0.0.0/24, etc.) are not blocked. This vulnerability is fixed in 0.9.0.