Is CVE-2026-56399 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-56399?

CVE-2026-56399 has a CVSS v3 severity of MEDIUM (5).

Back

CVE-2026-56399

Description

Open WebUI before 0.6.27 contains a server-side request forgery vulnerability in the /api/v1/retrieval/process/web endpoint that allows authenticated users to bypass SSRF protections. Attackers can manipulate URL parameters with location redirect headers to access internal services and potentially execute commands via instance secrets.