OpenWebUI Arbitrary File Upload Vulnerability in Audio API Endpoint Allowing Path Traversal and Potential Remote Code Execution

A vulnerability has been identified in OpenWebUI version 0.3.0 within the audio API endpoint '/audio/api/v1/transcriptions'. This vulnerability allows for arbitrary file uploads due to inadequate validation of the 'file.content_type' and the acceptance of user-controlled filenames, which creates a path traversal issue. An authenticated user could exploit this to overwrite critical files in the Docker container, possibly leading to remote code execution as the root user.

Impact

Exploitation of this vulnerability could result in unauthorized file overwrites within the Docker container, with the potential for remote code execution as the root user.