CVE-2026-109572 — Open WebUI 0.8.6 before 0.11.4 Privilege Escalation via Terminal Proxy
Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API …
Published: 2026-10-12 · CVSS: 7.2 · CVSS 4.0
Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop other users' terminals and modify terminal policies, injecting environment variables into other users' terminals.
Source: CVE Program · Revision 2bc2f154a9513fd639cf69e09a5cddfaedf57bdc