CVE-2026-105238 ChatGPTNextWeb CVE debrief

Who should care

Defenders responsible for ChatGPTNextWeb NextChat deployments should assess exposure and prioritize applying the fix. They should verify the presence of ChatGPTNextWeb NextChat up to version 2.16.1 in their deployments, review the proxyHandler function in app/api/proxy.ts, and monitor for remote attacks exploiting this vulnerability. Security teams and operators managing ChatGPTNextWeb NextChat should be aware of the potential impact and take necessary

Why it matters

CVE-2026-105238 is a server-side request forgery vulnerability in ChatGPTNextWeb NextChat that allows remote attacks. Defenders should verify exposure, prioritize fixing, and monitor for exploitation attempts.

• Remote attackers can exploit this vulnerability to manipulate server-side requests
• Defenders need to verify the presence of this vulnerability in their deployments
• Fixing this vulnerability requires accepting the pending pull request
• Further verification is needed to determine the full scope of this vulnerability

Technical summary

The proxyHandler function in app/api/proxy.ts of ChatGPTNextWeb NextChat up to version 2.16.1 is vulnerable to server-side request forgery due to manipulation of the x-base-url argument. The exploit has been published, and a fix is pending in pull request 6884. This vulnerability allows remote attackers to manipulate server-side requests. Defenders should prioritize verifying the presence of this vulnerability in their deployments and applying the fix as soon as it is accepted. The vulnerability affects the proxyHandler function

Defensive priority

Defenders should prioritize verifying the presence of this vulnerability in their deployments and applying the fix as soon as it is accepted.

Recommended defensive actions

• Verify the presence of ChatGPTNextWeb NextChat up to version 2.16.1 in your deployment
• Monitor for remote attacks exploiting the proxyHandler function
• Apply the pending fix from the pull request as soon as it is accepted
• Review and update the proxyHandler function in app/api/proxy.ts to prevent manipulation of the x-base-url argument
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and NVD entry provide details about the vulnerability, but its scope and remediation require further verification. Defenders should verify the presence of ChatGPTNextWeb NextChat up to version 2.16.1 in their deployments, review the proxyHandler function in app/api/proxy.ts, and monitor for remote attacks exploiting this vulnerability. The exploit has been made public, and a pull request for a fix is pending acceptance. Further verification is needed to determine the full scope of this vulnerability, including potential

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.