PT-2026-110706 · Git+1 · Open-Webui
CVSS v3.1
6.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Open WebUI versions 0.8.8 through 0.11.3
Description
An improper authorization issue exists where deactivated users can continue executing terminal commands via an active terminal WebSocket. This occurs because the terminal proxy route in
terminals.py only verifies access during the initial message, allowing deactivated accounts to maintain the ability to run commands and perform read or write operations on the terminal server.Recommendations
Update Open WebUI to version 0.11.4 or later.
Exploit
Fix
Insufficient Session Expiration
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Open-Webui