CVE-2026-70490

Received Received - Intake

Terminal Session Bypass in Open WebUI

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: GitHub, Inc.

Description

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, the terminal WebSocket route in backend/open_webui/routers/terminals.py authenticated its own first-message JWT and never applied the verified-user role gate that get_verified_user enforces on HTTP terminal routes. An account whose role is pending, including a registered but unapproved account or an account deactivated back to pending, can open an interactive terminal session when at least one terminal server is configured and its access grants cover the account. This loses the account-approval boundary for terminal access while the HTTP terminal routes correctly reject the same account. This issue is fixed in 0.11.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-04

Last Modified

2026-08-04

Generated

2026-08-05

AI Q&A

2026-08-05

EPSS Evaluated

N/A

NVD

CVE-2026-70490

Affected Vendors & Products

Vendor	Product	Version / Range
open_webui	open_webui	to 0.11.0 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

Open WebUI versions 0.8.8 to 0.11.0 had a flaw in the terminal WebSocket route where it authenticated its own first-message JWT without enforcing the verified-user role gate used by HTTP terminal routes. This allowed accounts with pending roles, including unapproved or deactivated accounts, to access interactive terminal sessions if terminal servers were configured and access grants covered the account.

Detection Guidance

Check Open WebUI version with 'pip show open-webui' or 'docker inspect <container>'. If version is between 0.8.8 and 0.11.0, the system is vulnerable. Review terminal server configurations and user roles in the admin panel.

Impact Analysis

If you use Open WebUI in versions 0.8.8 to 0.11.0 with terminal servers configured, an attacker could gain unauthorized terminal access by creating or reactivating an account with a pending role. This could lead to command execution, data theft, or further compromise of your system.

Compliance Impact

This vulnerability could violate compliance requirements by allowing unauthorized access to sensitive systems or data, potentially breaching confidentiality and integrity controls mandated by GDPR, HIPAA, or other regulations. Unauthorized terminal access may lead to data exposure or system manipulation, triggering non-compliance penalties.

Mitigation Strategies

Upgrade Open WebUI to version 0.11.0 or later immediately. Review and approve pending user accounts. Disable terminal server access for unapproved accounts until upgraded.

Hi! I’m here to help you understand CVE-2026-70490. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70