Security Advisory
CVE-2025-63681
4.3
MEDIUM
Vulnerability Description
open-webui v0.6.33 is vulnerable to Incorrect Access Control. The API /api/tasks/stop/ directly accesses and cancels tasks without verifying user ownership, enabling attackers (a normal user) to stop arbitrary LLM response tasks.
Published Date
December 4, 2025
Official Source
NIST NVD Advisory