CVE-2025-64496

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerability in the Direct Connections feature that allows malicious external model servers to execute arbitrary JavaScript in victim browsers via Server-Sent Event (SSE) execute events. This leads to authentication token theft, complete account takeover, and when chained with the Functions API, enables remote code execution on the backend server. The attack requires the victim to enable Direct Connections (disabled by default) and add the attacker's malicious model URL, achievable through social engineering of the admin and subsequent users. This issue is fixed in version 0.6.35.

• CWE-95
• CWE-501
• CWE-829
• CWE-830

• https://github.com/open-webui/open-webui/commit/8af6a4cf21b756a66cd58378a01c60f74c39b7caPatch
• https://github.com/open-webui/open-webui/security/advisories/GHSA-cm35-v4vp-5xvxExploit, Third Party Advisory
• https://github.com/open-webui/open-webui/security/advisories/GHSA-cm35-v4vp-5xvxExploit, Third Party Advisory

Published

Nov 8, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-64490SuiteCRM is an open-source, enterprise-ready Customer Relati…8.3
• CVE-2025-64491SuiteCRM is an open-source, enterprise-ready Customer Relati…6.1
• CVE-2025-64492SuiteCRM is an open-source, enterprise-ready Customer Relati…8.8
• CVE-2025-64493SuiteCRM is an open-source, enterprise-ready Customer Relati…6.5
• CVE-2025-64494Soft Serve is a self-hostable Git server for the command lin…4.6
• CVE-2025-64495Open WebUI is a self-hosted artificial intelligence platform…5.4
• CVE-2025-64497Tuleap is an Open Source Suite for management of software de…6.5
• CVE-2025-64498Tuleap is an Open Source Suite for management of software de…4.3
• CVE-2025-64499Tuleap is a free and open source suite for management of sof…5.4
• CVE-2025-6450A vulnerability was found in code-projects Simple Online Hot…9.8
• CVE-2025-64500Symfony is a PHP framework for web and console applications …7.3
• CVE-2025-64501ProsemirrorToHtml is a JSON converter which takes ProseMirro…7.6