CVE-2026-87999

    Dashboard / Vulnerabilities / CVE-2026-87999

    CVE-2026-87999

    Published: 9 Sept 2026Last Modified: 12 Sept 2026

    Summary: Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch

    Details: Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.11.1, POST /api/v1/retrieval/process/web and POST /api/v1/retrieval/process/web/search in backend/open_webui/retrieval/web/utils.py treated Python's globally routable address classification as proof that a destination was external. An authenticated user could make an Azure-hosted instance fetch and return content from 168.63.129.16, the Azure platform channel, as well as other reserved ranges that the standard classification did not reject. This issue is fixed in version 0.11.1.

    References: https://github.com/open-webui/open-webui/releases/tag/v0.11.1, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/87xxx/CVE-2026-87999.json, https://github.com/open-webui/open-webui/security/advisories/GHSA-34r3-9m95-vq73, https://nvd.nist.gov/vuln/detail/CVE-2026-87999, https://github.com/open-webui/open-webui/commit/e3e4bd87df6fc629e7e22081d980d55a7632b8b7, https://github.com/open-webui/open-webui/pull/27823

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -e3e4bd87df6fc629e7e22081d980d55a7632b8b7

    Affected versions

    v0.11.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-87999 | CVE-DB