The vulnerability in Open WebUI (<=0.7.2) occurs in the image editing API endpoint, where a user-provided URL is passed to a function that blindly performs an asynchronous HTTP GET request. There is no domain restriction, allowing requests to local address space. The SSRF is blind, meaning the response content is not returned to the user, but response success or failure can be used to infer open ports on the local network. This can be exploited to perform port scanning and potentially interact with internal services if they expose state-changing GET endpoints.

An attacker with authorized access can use the blind SSRF to scan ports on the local network by observing whether the GET request to a user-supplied URL succeeds or fails. This can reveal open services within the local address space. If any of these services accept state-changing GET requests, the attacker may be able to interact with them in a meaningful way, potentially leading to further compromise or unauthorized actions within the internal network.

Restrict user-supplied URLs to prevent requests to local address space. Implement validation to block URLs pointing to localhost, private IP ranges, or other internal network addresses. Since no official patch or fix is currently provided, applying such URL restrictions is the recommended mitigation until an official fix is released. Monitor vendor advisories for updates.