{"schemaVersion":3,"id":"CVE-2026-109289","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated users can keep running commands and reading or writing files on the terminal server.","dates":{"published":"2026-10-12T16:04:51.020Z","modified":"2026-10-13T16:55:31.359Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.3,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":5.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":5.3,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.3,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00214,"percentile":0.11127,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-10-13T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00214,"percentile":0.11127}],"last30":[{"date":"2026-10-13T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00214,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.00214,"percentile":0.11127}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-613","name":"Insufficient Session Expiration","description":"According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/613.html"}],"affected":[{"vendor":"open-webui","product":"open-webui","name":"open-webui","label":"open-webui","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 0.8.8, < 0.11.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 0.8.8, < 0.11.4","eol":null,"hubHref":"/vendor/open-webui/open-webui"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/open-webui/open-webui/security/advisories/GHSA-6g45-8g27-fh8q","label":"github.com/open-webui/open-webui/security/advisories/GHSA-6g45-8g27-fh8q","hostname":"github.com","tags":["Vendor Advisory"]},{"url":"https://www.vulncheck.com/advisories/open-webui-0.8.8-before-0.11.4-improper-session-revocation-via-terminal-websocket","label":"www.vulncheck.com/advisories/…","hostname":"www.vulncheck.com","tags":["Third Party Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-10-12T16:04:51.020Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-13T16:55:31.359Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":25,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T15:13:55.972Z","stale":false,"partial":false}}