https://reddit.com/r/Infosec/comments/1x4ek5o/new_blog_hands_off_the_keyboard/: New blog: Hands Off the Keyboard
Published Oct 12, 2026
·Updated
Affected Software
1 affected component
Open WebUI Open WebUI
Yes. The report describes an unauthenticated SQL injection path that led to operating-system command execution. It also describes an SSRF path that reached a root-level cloud host.
Reported outcomes included command execution across 23 hosts, theft of card and wallet data, and data wiping. One target was reportedly controlled for five days across 304 steps.
The report states that 150,574 AI gateways were swept for keys. It also describes attackers developing an in-house zero-day against gateway source code.
One reported SSRF-to-root compromise of a cloud host took 9 hours and 44 minutes. This reflects the observed intrusion described in the report, not a general exploitation timeframe.