Open WebUI and Playwright SSRF Vulnerability: Early Warning
- Severity
- HIGH
- Affected component
- open (pypi)
- Patched version
- Not yet available
An early warning has been issued for a potential SSRF vulnerability in the Open WebUI package when used with the Playwright web loader. This could allow attackers to read HTTP responses from internal addresses.
What happened
An early warning has been issued regarding a potential SSRF vulnerability in the Open WebUI package when used with the Playwright web loader. This vulnerability, tracked as GHSA-4V28-J6Q3-5M4R, could allow an attacker to exploit DNS rebinding to make the server read HTTP responses from internal addresses. This may lead to the exfiltration of sensitive data. The vulnerability is under investigation and no authoritative version range has been published yet.
The attack vector involves the use of the Playwright web loader with Open WebUI. If your application uses these components in a manner that allows untrusted URLs to be submitted, you may be at risk. It is recommended to avoid using the Playwright web loader with Open WebUI or to ensure that the web loader is not enabled in environments where untrusted URLs can be submitted.
What to do about it
- Avoid using the Playwright web loader with Open WebUI in your applications.
- Ensure that the Playwright web loader is not enabled in environments where untrusted URLs can be submitted.
- Monitor the primary sources for updates on this vulnerability as no official fix has been published yet.
How 0Day would have caught this
open is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.
Frequently asked questions
Am I affected?
You may be affected if your application uses the Open WebUI package with the Playwright web loader and allows untrusted URLs to be submitted. Consult the primary sources for the latest information.
What should I do right now?
Avoid using the Playwright web loader with Open WebUI or ensure that the web loader is not enabled in environments where untrusted URLs can be submitted. Monitor the primary sources for updates.
Has an official fix been released?
No official fix has been published yet. Continue to monitor the primary sources for updates.