diff --git a/backend/open_webui/routers/images.py b/backend/open_webui/routers/images.py
index c894f2c651..28a037a993 100644
--- a/backend/open_webui/routers/images.py
+++ b/backend/open_webui/routers/images.py
@@ -7,6 +7,7 @@ import logging
 import mimetypes
 import re
 import uuid
+from contextlib import nullcontext
 from pathlib import Path
 from types import SimpleNamespace
 from typing import Optional
@@ -488,14 +489,18 @@ async def get_image_data(data: str, headers=None, trusted_base_url: str | None =
             # that would follow arbitrary redirects.
             if trusted_base_url and _is_same_origin(data, trusted_base_url):
                 log.debug('Skipping URL validation for trusted backend: %s', data)
+                session_context = nullcontext(await get_session())
             else:
                 await asyncio.to_thread(validate_url, data)
-            session = await get_session()
-            async with session.get(
-                data,
-                headers=headers,
-                ssl=AIOHTTP_CLIENT_SESSION_SSL,
-            ) as r:
+                session_context = get_ssrf_safe_session()
+            async with (
+                session_context as session,
+                session.get(
+                    data,
+                    headers=headers,
+                    ssl=AIOHTTP_CLIENT_SESSION_SSL,
+                ) as r,
+            ):
                 r.raise_for_status()
                 content_type = r.headers.get('content-type', '')
                 if content_type.split('/')[0] == 'image':