CVE-2026-109292

6.8Medium

Published 12 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash

6.8Medium

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: Required
Impact: High impact on confidentiality, integrity
Weakness: CWE-200

Impact

Untrusted downstream API, tool, or terminal server operators can hijack user and administrator accounts. They need an authenticated user to trigger routine requests over an OAuth-mode connection.

Root cause

The application forwards the full browser cookie jar containing user session tokens to external destination servers on OAuth-mode requests.

Affected systems

Open WebUI 0.6.27 before 0.11.4

CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Fix & remediation

Upgrade Open WebUI to version 0.11.4 or later. If patching immediately is not possible, disable or avoid connecting to untrusted third-party OpenAI-compatible endpoints, OpenAPI tool servers, and terminal servers.

shell

$ docker pull ghcr.io/open-webui/open-webui:0.11.4

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal servers can capture forwarded session cookies from routine requests and replay them to hijack accounts, including administrators.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-109292