PYPI · SEPTEMBER 2026 · CONFIRMED

Open WebUI Package Vulnerable to SSRF via DNS Rebinding

Severity
HIGH
Affected component
open (pypi)
Patched version
Not yet available
GHSA-4V28-J6Q3-5M4R

The Open WebUI package is vulnerable to SSRF via DNS rebinding in the Playwright web loader, allowing an authenticated user to make the server read HTTP responses from internal addresses.

What happened

The vulnerability was first flagged on September 10, 2026, and confirmed shortly thereafter. It allows an authenticated user to exploit the Playwright web loader to perform Server-Side Request Forgery (SSRF) attacks via DNS rebinding. This can enable the user to make the server read HTTP responses from internal addresses, potentially exposing sensitive information.

The vulnerability affects the open (pypi) package, though no authoritative version range has been published yet. It is recommended to disable the Playwright web loader or ensure that internal services are not reachable by the browser process to mitigate the risk.

What to do about it

How 0Day would have caught this

MATCHED TO YOUR ACTUAL DEPENDENCY GRAPH0Day matches every incoming threat signal against your GitHub organization’s full dependency graph, including transitive dependencies. If open is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.

Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.

Frequently asked questions

Am I affected?

You may be affected if you are using the open (pypi) package. No authoritative version range has been published yet, so it is recommended to check your configuration and take appropriate action.

What should I do right now?

Disable the Playwright web loader or ensure that internal services are not reachable by the browser process. Monitor the primary sources for updates on the vulnerability and any official fixes that may be published.

Is there an official fix available?

No official fix has been published yet. Monitor the primary sources for updates.

Sources

Join the 0Day waitlist →

← Back to all threats