CVE-2026-82639 | ChatGPTNextWeb NextChat up to 2.16.1 Proxy Endpoint x-base-url improper authorization

August 30, 2026 Yanac

A vulnerability has been found in ChatGPTNextWeb NextChat up to 2.16.1 and classified as problematic. This affects an unknown function of the component Proxy Endpoint. This manipulation of the argument x-base-url causes improper authorization.

This vulnerability is handled as CVE-2026-82639. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More