GHSA-3PF7-Q2G3-WJ28 Open WebUI: Any authenticated user can inject chats into another user's folder via chat completions

Summary The chat-completions endpoint reads a folder id out of the request body and saves the newly created chat into that folder without checking that the caller is allowed to write there. Any authenticated user who knows a folder's id can put a chat of their own into another user's folder,...