CVE-2026-70480

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.6.34 through 0.10.x

Description Open WebUI renders vega and vega-lite fenced code blocks in chat content by building a Vega view in the viewer's browser without a restricted resource loader. This allows a user to place a block that forces another user's browser to issue attacker-chosen outbound GET requests. If the target is same-origin or has permissive Cross-Origin Resource Sharing (CORS) headers, the response body can be read into the rendered page. This effectively turns the victim's browser into a request proxy for internal hosts, ports behind the perimeter, or same-site endpoints, bypassing server-side Server-Side Request Forgery (SSRF) protections. The issue occurs within the renderVegaVisualization function in src/lib/utils/index.ts and the vega/vega-lite block rendering in src/lib/components/chat/Messages/CodeBlock.svelte.

Recommendations Update Open WebUI to version 0.11.0.