PYPI · SEPTEMBER 2026 · CONFIRMED

Open WebUI SSRF Vulnerability via DNS Rebinding in Playwright

Severity
HIGH
Affected component
open (pypi)
Patched version
Not yet available
GHSA-4V28-J6Q3-5M4R

The Open WebUI package is vulnerable to SSRF via DNS rebinding in the Playwright web loader, allowing an authenticated user to make the server read HTTP responses from internal addresses.

What happened

The Open WebUI package has a confirmed high-severity vulnerability tracked as GHSA-4V28-J6Q3-5M4R. This vulnerability allows an authenticated user to perform Server-Side Request Forgery (SSRF) via DNS rebinding in the Playwright web loader. This can result in the server reading HTTP responses from internal addresses, which may lead to unauthorized access to sensitive information or services.

The vulnerability was first flagged on 2026-09-10T15:10:12+00:00 and confirmed shortly after on 2026-09-10T16:12:18.491872+00:00. The specific component affected is the Playwright web loader within the Open WebUI package. No authoritative version range has been published yet, so all users of this package should consider themselves potentially affected.

What to do about it

How 0Day would have caught this

MATCHED TO YOUR ACTUAL DEPENDENCY GRAPH0Day matches every incoming threat signal against your GitHub organization’s full dependency graph, including transitive dependencies. If open is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.

Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.

Frequently asked questions

Am I affected?

If you are using the Open WebUI package with the Playwright web loader enabled, you are potentially affected. No specific version range has been published, so all users should take precautions.

What should I do right now?

Disable the Playwright web loader or ensure that internal services are not reachable by the browser process. Monitor the primary sources for updates on any available patches.

Has this been exploited in the wild?

No, this vulnerability has not been exploited in the wild according to the primary sources.

Is there an official patch available?

No official patch has been published yet. Continue to monitor the primary sources for updates.

Sources

Join the 0Day waitlist →

← Back to all threats