WS-2026-0092

Open WebUI 0.7.0 through 0.11.3: the community sync-stats modal's verify:chat window message listener src/lib/components/chat/Settings/SyncStatsModal.svelte accepted messages from any origin, inserted the chat id unencoded into an authenticated request path exportSingleChatStats in...