Vulnerabilities

TI-2026-81489 CVE-2026-118132 · GHSA-whxc-wj8p-jg38

Cross-site scripting in NextChat Plugin Editor

LOW 27

NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00247 Published 2026-10-27 No fix listed CWE-79

TI-2026-67707 CVE-2026-105238 · GHSA-rhg8-4whm-xj7w

Server-side request forgery in NextChat Proxy Fallback proxyHandler

HIGH 70

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00414 Published 2026-10-05 No fix listed CWE-918

TI-2026-56977 CVE-2026-82639 · GHSA-87fx-h8m6-gxwv

NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure

HIGH 77

NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server's OpenAI API key.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00508 Published 2026-08-30 No fix listed CWE-20

TI-2026-06726 CVE-2026-7644 · GHSA-2jqp-6hx7-phh8

ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization

HIGH 70

A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00309 Published 2026-05-02 No fix listed CWE-266

TI-2026-06725 CVE-2026-7643 · GHSA-cv87-px3c-7h2j

ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy

MEDIUM 57

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00158 Published 2026-05-02 No fix listed CWE-346

TI-2026-06301 CVE-2026-7178 · GHSA-p35r-jg68-wccx

ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery

HIGH 70

A weakness has been identified in ChatGPTNextWeb NextChat up to 2.16.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00344 Published 2026-04-27 No fix listed CWE-918

TI-2026-06300 CVE-2026-7177 · GHSA-ff75-fg5h-fjx7

ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery

MEDIUM 64

A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00356 Published 2026-04-27 No fix listed CWE-918

TI-2025-32232 CVE-2025-50735 · GHSA-6p2w-vm5p-8648

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing…

HIGH 72

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authentic…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00915 Published 2025-11-03 No fix listed CWE-22

TI-2024-25750 CVE-2024-38514

NextChat Server-Side Request Forgery (SSRF)

MEDIUM 45

NextChat is a cross-platform ChatGPT/Gemini UI.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.02168 Published 2024-06-28 Fixed in 2.12.4 CWE-918

TI-2023-27194 CVE-2023-49785 · GHSA-qf3q-9f3h-cjp9

NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting

CRITICAL 90

NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.83163 Published 2024-03-11 No fix listed CWE-79

Vulnerabilities

Filters