File-Upload
- RCE in Open WebUI via AFO in Transcription Endpoint
Open WebUI 0.3.0 does not validate the content type or filename on its audio transcription endpoint, letting an authenticated user write a file to a path of their choosing.
Open WebUI 0.3.0 does not validate the content type or filename on its audio transcription endpoint, letting an authenticated user write a file to a path of their choosing.