EUVD-2026-42636

Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream X-User-Id header and wsterminal sessionid query injection...