Bbp

Open WebUI 0.3.0 does not validate the content type or filename on its audio transcription endpoint, letting an authenticated user write a file to a path of their choosing.

Open WebUI 0.3.8 issues session cookies without the Secure flag and with SameSite set to Lax, which lets a low-privileged attacker carry out a session fixation attack.