CVE-2026-109286 open-webui CVE debrief

Who should care

Defenders responsible for Open WebUI instances, especially those with publicly accessible SyncStatsModal features, should verify exposure and take immediate action to update or apply compensating controls.

Why it matters

CVE-2026-109286 allows session token theft in Open WebUI versions 0.7.0 before 0.11.4 via SyncStatsModal. Defenders should verify exposure, update to version 0.11.4 or later, and apply compensating controls to restrict access to SyncStatsModal.

• Session token theft can lead to unauthorized API access.
• Attackers can supply a path-traversal chat id to redirect the authenticated stats export request to the auths endpoint.
• Defenders need to verify exposure of Open WebUI instances and update or apply compensating controls.
• Remediation priority is high due to the potential for full API access.

Technical summary

The vulnerability in Open WebUI versions 0.7.0 before 0.11.4 allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages via SyncStatsModal. This can lead to full API access for attackers. The issue arises from the handling of cross-origin messages in SyncStatsModal, enabling attackers to supply a path-traversal chat id that redirects the authenticated stats export request to the auths endpoint, thereby receiving the victim's JWT for full API access. Defenders should prioritize verifying exposure of Open WebUI instances, especially those with publicly accessible SyncStatsModal features, and take immediate action to update or apply compensating controls.

Defensive priority

Defenders should prioritize verifying exposure of Open WebUI instances, especially those with publicly accessible SyncStatsModal features. Immediate actions include updating to version 0.11.4 or applying compensating controls to restrict access to SyncStatsModal.

Recommended defensive actions

• Verify Open WebUI instance exposure, especially publicly accessible SyncStatsModal features.
• Update Open WebUI to version 0.11.4 or later.
• Apply compensating controls to restrict access to SyncStatsModal.
• Monitor for suspicious activity related to SyncStatsModal and session tokens.
• Review relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and source item provide details on the vulnerability in Open WebUI versions 0.7.0 before 0.11.4. The vulnerability allows session token theft via SyncStatsModal. Vendor advisories and third-party advisories offer additional context.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.