CVE-2026-109572— Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy
Quick assessment
Affected
open-webui open-webui
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Open WebUI 在 0.8.6 至 0.11.4 版本之间存在一个权限提升漏洞，该漏洞位于终端代理（terminal proxy）中。攻击者可以利用此漏洞，在附加共享密钥的情况下，访问 Terminals 管理员 API。通过向 发送请求，攻击者能够查看或停止其他用户的终端会话，并修改终端策略，从而向其他用户的终端注入环境变量。
Possible ATT&CK Techniques 3 AI
T1608 · Stage Capabilities T1078 · Valid Accounts T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| open-webui | open-webui | 0.8.6< 0.11.4 |
affected |
0.11.4 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-109572
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy
Source: CVE Program / CVE List V5
Vulnerability Description
Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop other users' terminals and modify terminal policies, injecting environment variables into other users' terminals.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| open-webui | open-webui | 0.8.6 ~ 0.11.4 | - |
|
II. Public POCs for CVE-2026-109572
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-109572
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-109572 (1)
Vendor Advisories for CVE-2026-109572 (1)
News Coverage for CVE-2026-109572 (1)
Same Patch Batch · open-webui · 2026-10-12 · 19 CVEs total
| CVE-2026-109286 | 8.1 HIGH | Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal |
| CVE-2026-109291 | 7.3 HIGH | Open WebUI 0.6.33 before 0.11.4 Stored XSS via Citation embed_url |
| CVE-2026-109290 | 7.3 HIGH | Open WebUI 0.11.1 before 0.11.4 Stored XSS via DOCX Preview |
| CVE-2026-109292 | 6.8 MEDIUM | Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections |
| CVE-2026-109299 | 6.5 MEDIUM | Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurrence Rule Validation |
| CVE-2026-109294 | 6.5 MEDIUM | Open WebUI 0.6.42 before 0.11.4 Memory Exhaustion via Compressed Remote Image |
| CVE-2026-109293 | 6.5 MEDIUM | Open WebUI 0.11.0 before 0.11.4 Tool Source Disclosure via Tool Export Endpoint |
| CVE-2026-109297 | 6.5 MEDIUM | Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence Rules |
| CVE-2026-109298 | 6.5 MEDIUM | Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowledge Search Regex |
| CVE-2026-109295 | 6.5 MEDIUM | Open WebUI 0.11.0 before 0.11.4 ReDoS via grep_knowledge_files Event Loop |
| CVE-2026-109288 | 6.4 MEDIUM | Open WebUI before 0.11.4 Stored XSS via javascript: URLs in Markdown Links |
| CVE-2026-109289 | 6.3 MEDIUM | Open WebUI 0.8.8 before 0.11.4 Improper Session Revocation via Terminal WebSocket |
| CVE-2026-109283 | 5.4 MEDIUM | Open WebUI 0.11.1 before 0.11.4 Authorization Bypass via OAuth Token Exchange |
| CVE-2026-109285 | 5.0 MEDIUM | Open WebUI 0.6.0 before 0.11.4 Improper Access Control via Stale File Metadata |
| CVE-2026-109300 | 4.6 MEDIUM | Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Embeds |
| CVE-2026-109284 | 4.3 MEDIUM | Open WebUI 0.11.0 before 0.11.4 Improper Authorization via Chat Fork Endpoint |
| CVE-2026-109296 | 4.3 MEDIUM | Open WebUI before 0.11.4 Missing Authorization via Backend Index on Model Routes |
| CVE-2026-109287 | 4.3 MEDIUM | Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory ID |
IV. Related Vulnerabilities
Same product: open-webui
-
CVE-2026-109300
Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Emb -
CVE-2026-109299
Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurre -
CVE-2026-109298
Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowle -
CVE-2026-109297
Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automa -
CVE-2026-109296
Open WebUI before 0.11.4 Missing Authorization via Backend I
Same vendor: open-webui
-
CVE-2026-109300
Open WebUI 0.6.31 before 0.11.4 Stored XSS via Tool-Call Emb -
CVE-2026-109299
Open WebUI 0.9.0 before 0.11.4 Denial of Service via Recurre -
CVE-2026-109298
Open WebUI 0.11.0 before 0.11.4 Memory Exhaustion via Knowle -
CVE-2026-109297
Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automa -
CVE-2026-109296
Open WebUI before 0.11.4 Missing Authorization via Backend I
Same weakness: CWE-862
-
CVE-2026-109692
WordPress User Registration plugin <= 5.2.8 - Broken Access -
CVE-2026-11905
Elementor Website Builder <= 4.2.3 - Missing Authorization t -
CVE-2026-17031
Checkout Field Manager (Checkout Manager) for WooCommerce <= -
CVE-2026-76066
IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolN -
CVE-2026-107795
Improper Authorization in TP-Link Omada Controller TLS Certi
V. Comments for CVE-2026-109572
No comments yet