This vulnerability in ChatGPTNextWeb NextChat (<= 2.16.1) arises from improper validation of the argument ID in the storeUrl function of the Artifacts Endpoint, enabling server-side request forgery. An attacker can remotely trigger the application to make unauthorized requests to internal or external resources. The issue was responsibly disclosed but remains unpatched as of the publication date. No official remediation or patch is currently available from the vendor. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, with low to low impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker to induce the vulnerable server to make arbitrary HTTP requests, potentially accessing internal systems or services not directly reachable by the attacker. This can lead to information disclosure or further network reconnaissance. However, the impact on confidentiality, integrity, and availability is rated low to low, consistent with the medium severity score. No known active exploitation in the wild has been reported.

No official fix or patch is currently available from the vendor. Users should monitor the vendor's advisory channels for updates. Until a patch is released, consider implementing network-level controls to restrict outbound requests from the affected application server to trusted destinations only. Additionally, review and restrict input validation on the affected parameter if possible. Avoid exposing the vulnerable endpoint to untrusted networks. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.