The vulnerability of the _validate_collection_access() function in the Open WebUI AI-based web interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the validatecollectionaccess function in the Open WebUI AI-based web interface relates to bypassing authentication using a user-controlled key. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Open WebUI 安全漏洞

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted WebUI under open source. Versions of Open WebUI prior to 0.9.0 contained security vulnerabilities. These vulnerabilities stemmed from the validatecollectionaccess function using an incomplete list of allowed collections. Onl...