CVE-2025-64496

CVE-2025-64496 is a high-severity code injection vulnerability in Open WebUI versions 0.6.224 and prior, specifically within its Direct Connections feature. An attacker can exploit this by tricking users into enabling Direct Connections and adding a malicious model URL, leading to arbitrary JavaScript execution in victim browsers. This allows for authentication token theft, complete account takeover, and potential remote code execution on the backend server when chained with the Functions API. While not actively exploited or having public exploit code, the vulnerability has garnered significant community discussion and media coverage, indicating awareness of its potential impact.