Open WebUI, an open-source, self-hosted web interface for interacting with local or remote AI language models, carried a high ...
The flaw, tracked as CVE-2025-64496 and discovered by Cato Networks researchers, impacts Open WebUI versions 0.6.34 and older ...
In a non-deterministic, AI-driven architecture, if your security strategy is trying to “catch up,” you’ve already lost.
The bug allows attacker-controlled model servers to inject code, steal session tokens, and, in some cases, escalate to remote ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback