Code Injection Vulnerability in Open WebUI AI Platform

CVE-2025-64496

What is CVE-2025-64496?

The Open WebUI platform, known for its self-hosted AI capabilities, contains a code injection vulnerability in the Direct Connections feature. This flaw, present in versions up to 0.6.224, allows malicious external model servers to run arbitrary JavaScript in the victim's browser through Server-Sent Events (SSE). As a result, attackers can hijack authentication tokens, potentially leading to complete account takeovers. When combined with the Functions API, this vulnerability can also enable remote code execution on the backend server. The risk is heightened if users enable Direct Connections—though disabled by default—and inadvertently add a malicious model URL, which may occur through social engineering tactics aimed at the admin and users. This vulnerability has been addressed in version 0.6.35.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

News Articles

References