What is the CVSS score of CVE-2025-65958?

CVE-2025-65958 has a CVSS 3.1 base score of 8.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Open Webui are affected by CVE-2025-65958?

Open WebUI deployments running versions prior to 0.6.37 are vulnerable to Server-Side Request Forgery attacks that allow any authenticated user to access internal networks, cloud metadata services,…. A patch is available.

Is there a public PoC exploit available for CVE-2025-65958?

Yes, a public proof-of-concept exploit is available for CVE-2025-65958. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2025-65958?

Within 24 hours: Identify all Open WebUI instances in your environment and document their version numbers and network exposure. Within 7 days: Upgrade all instances to version 0.6.37 or later; if immediate patching is not possible, implement network segmentation to restrict outbound HTTP/HTTPS traffic from Open WebUI servers. Within 30 days: Conduct access logs review for suspicious outbound requests, rotate any cloud credentials that may have been exposed, and perform a security assessment of affected systems.

Open Webui CVE-2025-65958

EUVD-2025-201264 HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2025-12-04 security-advisories@github.com

GHSA-c6xv-rcvw-v685

Microsoft SSRF Open Webui

8.5

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.5 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

EUVD ID Assigned

Mar 15, 2026 - 16:35 euvd

EUVD-2025-201264

Analysis Generated

Mar 15, 2026 - 16:35 vuln.today

Patch released

Mar 15, 2026 - 16:35 nvd

Patch available

PoC Detected

Dec 10, 2025 - 15:18 vuln.today

Public exploit code

CVE Published

Dec 04, 2025 - 20:16 nvd

HIGH 8.5

DescriptionGitHub Advisory

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.6.37, a Server-Side Request Forgery (SSRF) vulnerability in Open WebUI allows any authenticated user to force the server to make HTTP requests to arbitrary URLs. This can be exploited to access cloud metadata endpoints (AWS/GCP/Azure), scan internal networks, access internal services behind firewalls, and exfiltrate sensitive information. No special permissions beyond basic authentication are required. This vulnerability is fixed in 0.6.37.

Analysis

Technical ContextAI

Server-Side Request Forgery allows an attacker to induce the server to make HTTP requests to arbitrary destinations, including internal services. This vulnerability is classified as Server-Side Request Forgery (SSRF) (CWE-918).

RemediationAI

A vendor patch is available — apply it immediately. Validate and whitelist allowed URLs and IP ranges. Block requests to internal/private IP ranges. Use network segmentation to limit server-side request scope.