Cato CTRL™ Threat Research: Vulnerability Discovered in Open WebUI Enables Account Takeover and Remote Code Execution (CVE-2025-64496)

Executive Summary Cato CTRL’s Vitaly Simonovich (senior security researcher) has discovered a vulnerability ( CVE-2025-64496 with a “High” severity rating of 7.3 out of 10) in Open WebUI in versions 0.6.34 and older. This flaw affects the Direct Connections feature, which lets users connect to external AI model servers (ex: OpenAI’s API). This is a new AI security risk for organizations. If a threat actor tricks a user into connecting to a malicious server, it can lead to an…