openwebui

No explicit malicious code is shown; this is an interface/specification description. However, it documents a critical, non-sandboxed browser execution primitive (`execute` → `new Function(code)` with DOM/cookie/localStorage access) and shows how event payloads can be introduced via external tool forwarding. If `execute.code` or event dispatch is influenced by untrusted parties or lacks strict allowlisting/authorization, the system can enable direct browser compromise (session theft/exfiltration/DOM manipulation). Persistence of some event types and continued task execution after disconnect can further amplify impact. Overall: high design-level security risk; malware presence cannot be proven from this fragment alone.