CVE-2026-109289: Insufficient Session Expiration

Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated...

CVE-2026-109288: Improper Neutralization of Input During Web Page Generation

Open WebUI before 0.11.4 contains a stored cross-site scripting vulnerability in MarkdownInlineTokens.svelte, which renders markdown link URLs into anchor hrefs without validating their scheme. Authenticated users can embed javascript: links in shared chats that, when clicked by a victim, steal t...

CVE-2026-109284: Missing Authorization

Open WebUI from 0.11.0 before 0.11.4 contains an improper authorization vulnerability in the chat fork handler, which places forked chats in the source chat's folder without checking folder write access. Shared folder members downgraded to read-only can call POST /api/v1/chats/id/fork on chats th...

CVE-2026-109283: Incorrect Authorization

Open WebUI from 0.11.1 before 0.11.4 contains an authorization bypass in the OAuth token exchange endpoint, which reads role claims only from the provider's userinfo response and keeps the user's existing role when no roles claim is found, ignoring roles sent only in the ID token. Users with a...

CVE-2026-109572: Missing Authorization

Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/serverid/path to list or stop other...

PT-2026-110700

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.11.1 through 0.11.3 Description An authorization bypass exists in the OAuth token exchange process. The system reads role claims exclusively from the provider's userinfo response and retains the user's current role if no...

PT-2026-110705

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.11.4 Description A stored cross-site scripting issue exists in the MarkdownInlineTokens.svelte component. The software renders markdown link URLs into anchor hrefs without validating the URL scheme. This allows...

CVE-2026-109292: Exposure of Sensitive Information to an Unauthorized Actor

Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal...

PT-2026-110715

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.11.0 through 0.11.3 Description The software uses a regex engine for its knowledge and chat file search tools that expands nested counted repetition unbounded at compile time and caches the result. Authenticated users can...

CVE-2026-109300: Improper Neutralization of Input During Web Page Generation

Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks as tool output and mounts their embeds attribute in script-enabled iframes. Authenticated users can post crafted channel messages...

CVE-2026-109297: Uncontrolled Resource Consumption

Open WebUI 0.11.0 before 0.11.4 contains a denial of service vulnerability in the automation recurrence-rule validator, whose sub-daily frequency guard parses rule text more strictly than the calendar library that executes it. Users permitted to create automations can submit whitespace-folded rul...

PT-2026-110708

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.6.33 through 0.11.3 Description Authenticated users can execute scripts in other users' sessions by storing javascript: URLs within the citation embed url fields. An attacker can share a specially crafted chat; when a...

PT-2026-110710

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.11.0 through 0.11.3 Description Authenticated non-admin users with tool export permission can obtain the full Python source code of tools shared with them in read-only mode. This occurs when requesting the 'GET...

EulerOS 2.0 SP13 : open-iscsi (EulerOS-SA-2026-4075)

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open- iscsi allows remote MITM attackers to...

PT-2026-110707

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.11.1 through 0.11.3 Description Authenticated users can execute scripts by uploading crafted DOCX attachments. The issue resides in DocxPreview.svelte and occurs when attackers embed an OOXML altChunk HTML part or a...

PT-2026-110713

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.11.4 Description Authenticated users can access disabled model provider backends by providing an explicit backend index. This occurs on Ollama and OpenAI-compatible listing routes, where the index can be passed a...

PT-2026-110703

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.7.0 through 0.11.3 Description A cross-origin message handling issue exists in the SyncStatsModal component. This allows an external website to steal a signed-in user's session token by sending unvalidated verify:chat...

CVE-2026-109286: Origin Validation Error

Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated...

CVE-2026-109290: Improper Neutralization of Input During Web Page Generation

Open WebUI from 0.11.1 before 0.11.4 contains a stored cross-site scripting vulnerability in DocxPreview.svelte that allows authenticated users to execute script by uploading crafted DOCX attachments. Attackers can embed an OOXML altChunk HTML part or script-scheme hyperlink to steal a previewing...

Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1

Overview Thelia versions 2.6.0 and 2.6.1 contain multiple vulnerabilities relating to file management, Smarty templating, module installation, and administrative workflows. Successful exploitation of these issues could enable remote code execution RCE, server-side template injection SSTI, stored...