Cross-user code execution via unvalidated session targeting

Authorization bypass in Open WebUI before 0.10.0 allows remote authenticated users to execute Python and tools in another user session. The get_event_call function routes execute:python and execute:tool Socket.IO events to a client-supplied session_id after confirming only that the target socket is connected, without verifying session ownership. Exploitation requires a low-privilege account, a shared note that exposes the victim's live socket ID, an online victim, and enabled code interpreter; an administrator victim permits server-process code execution.