CVE-2026-70490 open-webui CVE debrief

Who should care

Defenders and administrators of Open WebUI installations should assess exposure and prioritize remediation, as pending accounts could access terminal sessions without proper approval.

Why it matters

CVE-2026-70490 allows pending accounts in Open WebUI to access terminal sessions, bypassing approval boundaries. Defenders should verify and upgrade to version 0.11.0 or later, review and restrict terminal access for pending accounts, and monitor for suspicious activity.

• Pending accounts could access terminal sessions without proper approval, bypassing account-approval boundaries.
• Terminal access may be restricted for pending accounts to prevent unauthorized access.
• Monitoring for suspicious terminal activity is necessary to detect potential exploitation.

Technical summary

The terminal WebSocket route in Open WebUI did not properly authenticate and authorize users, allowing pending accounts to access terminal sessions. This issue bypasses the account-approval boundary for terminal access, while HTTP terminal routes correctly reject the same account. The vulnerability is fixed in version 0.11.0. Defenders should prioritize verifying and upgrading to version 0.11.0 or later, reviewing and restricting terminal access for pending accounts, and monitoring for suspicious terminal activity.

Defensive priority

Defenders should prioritize verifying and upgrading to version 0.11.0 or later, reviewing and restricting terminal access for pending accounts, and monitoring for suspicious terminal activity.

Recommended defensive actions

• Verify and upgrade to version 0.11.0 or later
• Review and restrict terminal access for pending accounts
• Monitor for suspicious terminal activity
• Confirm whether affected Open WebUI deployments exist in managed environments and assign an owner for follow-up.
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.

Evidence notes

The CVE record and NVD vulnerability detail page provide information on the vulnerability, its impact, and the affected versions. A vendor advisory is available on the GitHub security advisories page.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.