CVE-2026-109572

Received Received - Intake

Privilege Escalation in Open WebUI Terminal Proxy

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulnCheck

Description

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop other users' terminals and modify terminal policies, injecting environment variables into other users' terminals.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-12

Last Modified

2026-10-12

Generated

2026-10-13

AI Q&A

2026-10-13

EPSS Evaluated

N/A

NVD

CVE-2026-109572

Affected Vendors & Products

Vendor	Product	Version / Range
open-webui	open-webui	0.8.6

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

Open WebUI versions 0.8.6 to 0.11.3 have a privilege escalation flaw in the terminal proxy. Authenticated users can exploit the /api/v1/terminals/{server_id}/{path} endpoint to access the Terminals administrator API using a shared key. This allows listing or stopping other users' terminals and modifying terminal policies, including injecting environment variables into those terminals.

Detection Guidance

Check Open WebUI versions between 0.8.6 and 0.11.3 for potential exposure. Monitor logs for unauthorized access to /api/v1/terminals/{server_id}/{path} endpoints. Inspect terminal policies and environment variables for unexpected modifications.

Impact Analysis

An attacker with valid credentials could take control of other users' terminal sessions, steal sensitive data, or execute unauthorized commands. This could lead to data breaches, system compromise, or further lateral movement within the network.

Compliance Impact

This vulnerability could violate compliance requirements by enabling unauthorized access to user data and terminal sessions. GDPR may require breach notification if personal data is exposed, while HIPAA could be violated if protected health information is compromised through terminal access.

Mitigation Strategies

Upgrade Open WebUI to version 0.11.4 or later immediately. Review and restrict access to terminal-related API endpoints. Audit terminal policies and environment variables for unauthorized changes.

Hi! I’m here to help you understand CVE-2026-109572. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70