This vulnerability involves a server-side request forgery (SSRF) in the NextChat product of ChatGPTNextWeb, affecting versions 2.16.0 and 2.16.1. The issue is located in the proxyHandler function of the app/api/[provider]/[...path]/route.ts source file. An attacker can remotely manipulate this function to induce the server to send crafted requests to arbitrary destinations. The vulnerability was responsibly disclosed but remains unpatched, and public exploit code has been released. The CVSS 4.0 score of 6.9 reflects a medium severity with network attack vector, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability.

Successful exploitation allows an unauthenticated remote attacker to cause the vulnerable server to make arbitrary HTTP requests. This can lead to information disclosure or interaction with internal systems not directly accessible to the attacker. The impact on confidentiality, integrity, and availability is rated as low to limited. No known exploits in the wild have been confirmed, but public exploit code exists, increasing the risk of exploitation.

No official patch or remediation has been released by the vendor as of the published date. Since the project has not responded to the issue report, users should monitor the vendor's communications for updates. In the meantime, consider implementing network-level controls to restrict outbound requests from the affected server to trusted destinations only, if feasible. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.