CVE-2024-7037: open-webui allows writing and deleting arbitrary files

The vulnerability stems from the file upload handler referenced in GitHub's main.py line 1513. The advisory explicitly states unsanitized filename concatenation with CACHE_DIR as the root cause. The code likely uses user-supplied filename directly in os.path.join() or similar file operations without normalization/sanitization checks. This matches the CWE-22 pattern where user-controlled filenames can contain path traversal sequences (../../) to escape the restricted directory. The high confidence comes from multiple sources (GHSA, CVE, huntr) all pointing to this specific endpoint and code pattern.