A server-side request forgery vulnerability (CVE-2026-7177) exists in ChatGPTNextWeb NextChat up to version 2.16.1. The issue is located in the proxyHandler function of the app/api/[provider]/[...path]/route.ts file. An attacker can remotely exploit this flaw without authentication to induce the server to send crafted requests to arbitrary destinations. The vulnerability was responsibly disclosed but remains unpatched as of the latest information. Public exploit code is available, which may facilitate attacks. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges or user interaction required, with low to low impact on confidentiality, integrity, and availability.

Successful exploitation of this SSRF vulnerability could allow an attacker to make arbitrary requests from the vulnerable server, potentially accessing internal resources or services not directly exposed to the attacker. This could lead to information disclosure or further attacks depending on the internal network configuration. However, the impact is rated medium due to the limited scope of confidentiality, integrity, and availability impacts as per the CVSS vector. There are no known exploits in the wild at this time, but public exploit code exists.

As of the current information, no official patch or remediation has been released by the vendor. Users should monitor the vendor's channels for updates or patches. In the meantime, consider implementing network-level restrictions to limit the server's ability to make arbitrary outbound requests, such as firewall rules or proxy filtering. Avoid exposing the vulnerable endpoint to untrusted networks. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.