CVE-2026-109289 open-webui CVE debrief

Who should care

Defenders responsible for Open WebUI deployments should assess exposure and prioritize upgrading to version 0.11.4 or later. They should also review user access and session revocation to prevent unauthorized access and potential attacks. Additionally, defenders should monitor terminal server logs for suspicious activity to detect potential attacks. Security teams and vulnerability management teams should also be aware of this vulnerability and take steps

Why it matters

Defenders should prioritize verifying and upgrading to version 0.11.4 or later, and review user access and session revocation to prevent unauthorized access and potential attacks.

• Verify and upgrade to version 0.11.4 or later to prevent unauthorized access
• Review user access and session revocation to prevent exploitation
• Monitor terminal server logs for suspicious activity to detect potential attacks

Technical summary

The vulnerability allows deactivated users to execute terminal commands through an open terminal WebSocket due to improper authorization in Open WebUI versions 0.8.8 before 0.11.4. The terminal proxy route in terminals.py only checks access on the first message, enabling deactivated users to run commands and read or write files on the terminal server. This vulnerability can be mitigated by upgrading to version 0.11.4 or later and reviewing user access and session revocation. Defenders should prioritize verifying and upgrading to version 0.11.4 or later, and review user access and session revocation to prevent unauthorized access and potential attacks.

Defensive priority

Defenders should prioritize verifying and upgrading to version 0.11.4 or later, and review user access and session revocation.

Recommended defensive actions

• Verify and upgrade to version 0.11.4 or later
• Review user access and session revocation
• Monitor terminal server logs for suspicious activity
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE Program record and NVD vulnerability detail provide official information on the vulnerability. Vendor advisories and third-party advisories offer additional context. Open WebUI versions 0.8.8 before 0.11.4 contain an improper authorization vulnerability allowing deactivated users to execute terminal commands through an open terminal WebSocket. The terminal proxy route in terminals.py only checks access on the first message, enabling deactivated users to run commands and read or write files on the terminal server. Defenders can

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.