Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/09/10 3:10 p.m.5 views

Open WebUI: Channel members can overwrite another member's message via the chat completions endpoint

Summary Any member of a channel who can post to it could also replace the text of a message written by a different member. The channel branch of the chat completions endpoint checked that the caller may write to the channel, and that the targeted message belongs to that channel, but never checked...

4.3CVSS0.00213EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder