Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...
The bug allows attacker-controlled model servers to inject code, steal session tokens, and, in some cases, escalate to remote ...
The flaw, tracked as CVE-2025-64496 and discovered by Cato Networks researchers, impacts Open WebUI versions 0.6.34 and older ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback