High · published November 8, 2025
⚡ A cunning code injection vulnerability hides in the Direct Connections feature of Open WebUI, allowing attackers to execute arbitrary JavaScript in victim browsers. 🔥 Think of it like a sneaky waiter who brings a dish to your table that’s laced with an ingredient you didn’t order — if a malicious external model server is added, it gets the chance to spice things up in your browser without any checks! This is no picnic! An attacker could easily steal authentication tokens and take full control of user accounts. If they chain this with the Functions API, they could even execute remote code on the backend server, putting your entire system at risk!
Think of it like a sneaky waiter who brings a dish to your table that’s laced with an ingredient you didn’t order — if a malicious external model server is added, it gets the chance to spice things up in your browser without any checks! The vulnerability in versions 0.6.224 and prior allows malicious model URLs to execute JavaScript in browsers via Server-Sent Events (SSE), which can lead to account takeovers and backend control.
This is no picnic! An attacker could easily steal authentication tokens and take full control of user accounts. If they chain this with the Functions API, they could even execute remote code on the backend server, putting your entire system at risk! Update to version 0.6.35 immediately to patch this vulnerability. Ensure that Direct Connections are disabled unless absolutely necessary, and educate users about the risks of social engineering tactics. You've got this! Stay vigilant and follow these steps to keep your platform safe! 🛡️