Open WebUI Terminal Proxy Unauthorized Access & Policy Manipulation (CVE-XXXX)

Vulnerability Overview Title: Terminal users can manage Terminal policies and other users' terminals via the terminal proxy Description: If a regular user has been granted access to Terminals connections, they can send requests to the Terminal Administrator API through the Open WebUI terminal proxy. Open WebUI forwards any request path and appends the administrator-configured shared secret, causing the terminal to treat the request as an administrative one. Users can read and modify terminal policies, list and stop other users' terminals, without ever seeing the secret key. Scope Affected Versions: >= 0.8.6, < 0.11.4 Fixed Version: 0.11.4 CVSS Score: 7.8 / 10 (High) Attack Vector: Network Attack Complexity: Low Required Privileges: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: High Availability: Low Remediation Fixed Version: 0.11.4 Remediation Details: The terminal proxy now refuses to forward requests to terminal admin paths (policies, status, and terminal lifecycle). Terminal 0.2.4 also refuses administrative requests arriving as a regular user. Prerequisites The administrator has added a terminal (orchestrator) connection using bearer authentication (the default authentication type for terminal API connections). The attacker possesses a normally authenticated account and has obtained access to this connection. The connection is not pinned to a specific policy. Pinned connections route requests into the policy's own terminals, bypassing the admin API. The terminal server version associated with the connection is lower than 0.2.4. Terminal 0.2.4 refuses administrative requests carrying a user identity, blocking this attack path from functioning independently. Deployments without terminal connections are unaffected. Impact Under the above prerequisites, the attack requires one authenticated request per operation and involves no interaction from any user. The attacker can list all active terminals along with their owner user ID, policy, instance name, host, port, and status; stop another user's running terminal; read terminal status and configuration; and create and modify terminal policies. Policy changes affect other users: environment variables set by the terminal that created the policy take effect when started in the second user's terminal. Stopped terminals restart upon their next connection. Open WebUI's own data is not exposed through this vector. Fix Fixed in version 0.11.4. The terminal proxy now refuses to forward requests to terminal admin paths (policies, status, and terminal lifecycle). Terminal 0.2.4 also refuses administrative requests arriving as a regular user. Root Cause Component: The proxy in . Affected Builds: Every build from 0.8.6 to 0.11.3 that uses terminal connection configuration. The proxy is designed to allow users to access their own terminals via the orchestrator, forwarding any path from the user along with the server's shared secret. Since terminals use the same secret to protect their admin APIs, the proxy never separated user traffic from admin traffic, allowing users to target admin paths. Proof of Concept (POC) The victim's terminal container is removed. The policy is overwritten and environment variables are set, then a second user opens a terminal connected to that policy, starting a container carrying the attacker's values. On version 0.11.4, each request returns 403. The proxy was tested directly using the connection configuration and user identity. Credits @dhil009 @yo11oc4t @jwhan8655 @Dog-Parka

Goal Reached Thanks to every supporter — we hit 100%!

Open WebUI Terminal Proxy Unauthorized Access & Policy Manipulation (CVE-XXXX)

More from this source