Information Disclosure

Open WebUI is vulnerable to sensitive Information Exposure. The vulnerability is due to insufficient authorization on the channel members API, where full user settings are returned to channel participants, allowing authenticated users to access sensitive information such as tool server keys and...