1 sources verified·1 min read
By Lyrie Threat Intelligence·5/14/2026
Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958)
_AI Threats — being enriched by Lyrie Threat Intelligence._
Lyrie Verdict
Lyrie's autonomous defense layer flags this class of exposure the moment it surfaces — no signature update required.
Validated sources
Related Articles
agent threats
oapi-codegen: OpenAPI Server Description Escapes Generated Go Comment and Injects Executable Code
1 min read · 1 sources
agent threats
Context Contamination in LLM Analysis of Network Security Logs: Poison with Passive Prompt Injection and Mitig
1 min read · 1 sources
agent threats
Routing Ceilings Are Domain-Independent: Structural Prior Injection in Code Security Vulnerability Detection
1 min read · 1 sources