GHSA-6xcp-7mpr-m7wm: Open WebUI has a CORS misconfiguration and session validation issue

Due to a CORS misconfiguration and session validation issue, an attacker may be able to perform a 1 click attack against browsers with admin access to openwebui, resulting in remote code execution in the openwebui instance. The openwebui application runs as root in Docker container’s default setup, which allows for complete compromise of the container.