CVE-2024-7049

In version v0.3.8 of open-webui/open-webui , a vulnerability exists where a token is returned when a user with a pending role logs in. This flaw allows the user to perform actions without administrative confirmation, effectively bypassing the intended approval process . To remediate this, users s...