CVE-2026-105238: ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery

Severity: high (CVSS 7.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-05 · updated 2026-10-06
Weakness: CWE-918

Description

A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Affected products

ChatGPTNextWeb NextChat: 2.16.0, 2.16.1

References

https://github.com/ChatGPTNextWeb/NextChat/
https://github.com/ChatGPTNextWeb/NextChat/issues/6813
https://github.com/ChatGPTNextWeb/NextChat/pull/6884
https://vuldb.com/cve/CVE-2026-105238
https://vuldb.com/submit/975707
https://vuldb.com/vuln/413450
https://vuldb.com/vuln/413450/cti

Get alerted when CVE-2026-105238 or the next vulnerability affects your stack