Chatgptnextweb
6 CVEs across 2 Chatgptnextweb products. Browse Chatgptnextweb vulnerabilities, severities, and proof-of-concept exploits.
Chatgptnextweb products with known CVEs
Chatgptnextweb CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-7644 | High | 7.3 | 2026-05-02 | A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1. Affected is the function addMcpServer of the file app/mcp/actions.ts. The manipulation… |
CVE-2026-7643 | Medium | 4.3 | 2026-05-02 | A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of the file Next.js of the component API Endpoint. Executing a… |
CVE-2026-7178 | High | 7.3 | 2026-04-27 | A weakness has been identified in ChatGPTNextWeb NextChat up to 2.16.1. This affects the function storeUrl of the file app/api/artifacts/route.ts of the compon… |
CVE-2026-7177 | High | 7.3 | 2026-04-27 | A security flaw has been discovered in ChatGPTNextWeb NextChat up to 2.16.1. Affected by this issue is the function proxyHandler of the file app/api/[provider]… |
CVE-2024-38514 | High | 7.4 | 2024-06-28 | NextChat is a cross-platform ChatGPT/Gemini UI. There is a Server-Side Request Forgery (SSRF) vulnerability due to a lack of validation of the `endpoint` GET p… |
CVE-2023-49785 | Critical | 9.1 | 2024-03-12 | NextChat, also known as ChatGPT-Next-Web, is a cross-platform chat user interface for use with ChatGPT. Versions 2.11.2 and prior are vulnerable to server-side… |