Incorrect authorization in Open WebUI - #VU140760
Published: August 3, 2026
Vulnerability identifier: #VU140760
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-863
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to gain unauthorized terminal access.
The vulnerability exists due to incorrect authorization in the _resolve_authenticated_connection helper backing the /{server_id}/api/terminals/{session_id} WebSocket route when authenticating terminal WebSocket connections. A remote user can open a terminal WebSocket session with a valid JWT for a pending account to gain unauthorized terminal access.
At least one terminal server must be configured, and the applicable terminal access grants must already allow the account through public access or group membership. Deployments with no terminal server configured or with admin-only terminal grants are not affected.
Affected software
Open WebUI
Remediation
Install security update from vendor's website.
Open WebUI - update to 0.11.0