PT-2026-67836

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.6 through 0.10.2 Description An issue exists where the DELETE /api/v1/chats/id endpoint cancels in-flight tasks before verifying if the caller has the necessary permissions to delete the chat. An authenticated user who...