What the vulnerability does

01Description

open-webui v0.5.16 is vulnerable to SSRF in routers/ollama.py in function verify_connection.

Key dates

02Disclosure timeline

April 21, 2025 CVE published
May 12, 2025 Record updated