CVE-2026-7177: fallo de gravedad media en ChatGPTNextWeb NextChat
ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
33Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendcvss 6.9epss 0.4%
A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1. Affected by this issue is the function proxyHandler of the file app/api/[provider]/[...path]/route.ts. The manipulation results in server-side request forgery. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
ChatGPTNextWeb · NextChatPoCs públicas encontradas — 1
cve_referencegist.github.com/YLChen-007/da6b00024f5b7e1d4fa0658c19b77fbfno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — ChatGPTNextWeb NextChat
En el mismo producto, de las más peligrosas a las menos.
CVE-2023-49785CRITICALNextChat vulnerable to Server-Side Request Forgery and Cross-site ScriptingEPSS 83.2%CVE-2026-82639HIGHNextChat 2.15.8 through 2.16.1 OpenAI API Key DisclosureEPSS 0.5%CVE-2026-105238MEDIUMChatGPTNextWeb NextChat Proxy Fallback proxy.ts proxyHandler server-side request forgeryEPSS 0.4%CVE-2026-7178MEDIUMChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgeryEPSS 0.3%CVE-2026-7644MEDIUMChatGPTNextWeb NextChat actions.ts addMcpServer improper authorizationEPSS 0.3%CVE-2026-7643MEDIUMChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policyEPSS 0.2%