CVE-2026-7178
ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A weakness has been identified in ChatGPTNextWeb NextChat up to 2.16.1. This affects the function storeUrl of the file app/api/artifacts/route.ts of the component Artifacts Endpoint. This manipulation of the argument ID causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-918 |
| Vendor | chatgptnextweb |
| Product | nextchat |
| Published | Apr 27, 2026 |
Stay Ahead of the Next One
Get instant alerts for chatgptnextweb nextchat
Be the first to know when new high vulnerabilities affecting chatgptnextweb nextchat are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
ChatGPTNextWeb / NextChat
2.16.0 2.16.1
References
vuldb.com: https://vuldb.com/vuln/359780 vuldb.com: https://vuldb.com/vuln/359780/cti vuldb.com: https://vuldb.com/submit/797646 github.com: https://github.com/ChatGPTNextWeb/NextChat/issues/6741 gist.github.com: https://gist.github.com/YLChen-007/43252d45d75e8bdd2d45136fd6ffe8a5 github.com: https://github.com/ChatGPTNextWeb/NextChat/
Credits
🔍 Eric-b (VulDB User) VulDB CNA Team