Threat database

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server's OpenAI API key. The x-base-url header is validated using substring matching instead of hostname parsing, allowing any URL containing 'api.openai.com' to pass validation and receive the server's credentials in the Authorization header.

A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of the file Next.js of the component API Endpoint. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVE-2026-7178 is a server-side request forgery (SSRF) vulnerability in ChatGPTNextWeb NextChat versions up to 2.16.1. The flaw exists in the storeUrl function within the app/api/artifacts/route.ts file of the Artifacts Endpoint component. An attacker can remotely manipulate the argument ID to trigger SSRF. Although the vulnerability has been publicly disclosed and exploit code is available, the vendor has not yet responded or provided a fix. The CVSS 4.0 base score is 6.9, indicating a medium severity level.

CVE-2026-7177 is a server-side request forgery (SSRF) vulnerability affecting ChatGPTNextWeb NextChat versions up to 2.16.1. The flaw exists in the proxyHandler function within the app/api/[provider]/[... path]/route.ts file. This vulnerability allows an unauthenticated remote attacker to manipulate server requests, potentially causing the server to make unintended requests. The exploit code has been publicly released, increasing the risk of exploitation. As of the published date, the vendor has not responded or provided a fix. The vulnerability has a CVSS 4.