Open WebUI carried CVE-2025-64496, a high-severity code injection flaw in Direct Connection features Exploitation could ...

The flaw, tracked as CVE-2025-64496 and discovered by Cato Networks researchers, impacts Open WebUI versions 0.6.34 and older ...

The bug allows attacker-controlled model servers to inject code, steal session tokens, and, in some cases, escalate to remote ...

A new user interface in the form of Stable Diffusion WebUI Forge, has been released providing users with a significant advancement in the realm of image synthesis and manipulation. Forge has been ...