CVE-2026-7643
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
A flaw was found in ChatGPTNextWeb NextChat up to 2.16.1 affecting an unknown function of the Next.js file in the API Endpoint component. Manipulation can lead to a permissive cross-domain policy with untrusted domains, and the attack may be launched remotely.
Risk Assessment
A remote attacker may exploit the permissive cross-domain policy, potentially enabling unauthorized data access or interaction with untrusted domains. The exploit has been published and may be used.
Recommendation
Restrict or disable the API Endpoint component until the project releases a fix and enforce a restrictive CORS policy.
Other vulnerabilities in NextChat
See all- CVE-2026-118132Low risk· EPSS 13%
NextChat version 2.16.1 contains a client-side cross-site scripting (XSS) vulnerability in the Plugin Editor due to unsafe rendering of externally supplied OpenAPI plugin schema content. Content loaded from a remote URL is stored in plugin.content and rendered via React's dangerouslySetInnerHTML without proper sanitization, allowing arbitrary JavaScript execution in the NextChat origin.
- CVE-2026-105238High
A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This vulnerability affects the function proxyHandler of the file app/api/proxy.ts of the component Proxy Fallback Handler. This manipulation of the argument x-base-url causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.
- CVE-2026-82639High
NextChat versions from 2.15.8 through 2.16.1 contain an improper URL validation vulnerability in the proxy endpoint that allows attackers to obtain the server's OpenAI API key. The x-base-url header is validated using substring matching instead of hostname parsing, allowing any URL containing 'api.openai.com' to pass validation and receive the server's credentials in the Authorization header.
Original NVD description (English source)
A flaw has been found in ChatGPTNextWeb NextChat up to 2.16.1. This impacts an unknown function of the file Next.js of the component API Endpoint. Executing a manipulation can lead to permissive cross-domain policy with untrusted domains. The attack may be launched remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS