The bug allows attacker-controlled model servers to inject code, steal session tokens, and, in some cases, escalate to remote code execution on enterprise AI backends. Security researchers have ...

A high-severity security vulnerability affecting Open WebUI has been uncovered, potentially exposing users to account takeover (ATO) and, in some cases, full server compromise. The flaw, tracked as ...

Open WebUI has been the default recommendation for anyone running a local LLM for a while now, and for good reason. It's the closest thing to ChatGPT's polish that you can self-host, and if you're ...