Description
NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server's OpenAI API key. The x-base-url header is validated using substring matching instead of hostname parsing, allowing any URL containing 'api.openai.com' to pass validation and receive the server's credentials in the Authorization header.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ChatGPTNextWeb | NextChat | 2.15.8 – ≤ 2.16.1 | — |
References
- GitHub Issue #6814 issue-tracking
- https://github.com/ChatGPTNextWeb/NextChat product
- https://github.com/ChatGPTNextWeb/NextChat/blob/v2.16.1/app/api/proxy.ts technical-description
- VulnCheck Advisory: NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure third-party-advisory