#csrf

llama.cpp WebUI query param enables CSRF tool runs

Crafted links can auto-submit prompts that invoke enabled server tools, including shell execution when confirmation is waived.