Log in Start free

ChatGPTNextWeb

Products

ProductCVEsExploitedLatest
NextChat7–Oct 5, 2026
ChatGPT-Next-Web1–Jun 28, 2024

Exploited and recent CVEs

  • CVE-2026-105238 High 7.3 ChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgery 0.4%
  • CVE-2026-82639 High 7.5 NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure 0.5%
  • CVE-2026-7644 High 7.3 ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization 0.3%
  • CVE-2026-7643 Medium 4.3 ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy 0.2%
  • CVE-2026-7178 High 7.3 ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery 0.3%
  • CVE-2026-7177 High 7.3 ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery 0.4%
  • CVE-2024-38514 High 7.4 NextChat Server-Side Request Forgery (SSRF) 2.2%
  • CVE-2023-49785 Critical 9.1 NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting 83.2%