Skip to content

CVE-2025-64496

CVE

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
January 6, 2026
Last Seen
January 6, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A high-severity security vulnerability, tracked as CVE-2025-64496, has been identified in Open WebUI, affecting versions 0.6.34 and older when the Direct Connections feature is enabled. Discovered by Cato Networks researchers, the flaw allows for account takeover and, under certain conditions, remot...

Public Exploits

Checking GitHub for proof-of-concept code…