CVE-2026-109289

6.3Medium

Published 12 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash

6.3Medium

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None
Impact: Limited impact
Weakness: CWE-613

Impact

Deactivated users can continue executing terminal commands and reading or writing files via previously established terminal WebSockets. An attacker needs an account that had terminal access and established a connection before deactivation.

Root cause

The terminal proxy route only validates user access permissions on the initial message rather than re-authorizing ongoing WebSocket traffic.

Affected systems

Open WebUI from 0.8.8 before 0.11.4

CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Fix & remediation

Upgrade Open WebUI to version 0.11.4 or later. If updating immediately is not possible, restart the Open WebUI container or service to forcefully terminate existing WebSockets, or disable terminal access.

shell

$ pip install --upgrade open-webui

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated users can keep running commands and reading or writing files on the terminal server.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-109289