Authorization Bypass Through User-Controlled Key

Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the getmessagesbyparentid process. An attacker can access the content, channel ID, and author metadata of messages in private channels they do not belong t...