GHSA-4vg5-rp28-gvjf: Open WebUI has Improper Authorization Control | AI Sec Watch