CVE-2026-109289 | Open WebUI up to 0.11.3 Terminal Proxy Route terminals.py improper authorization

October 12, 2026 Yanac

A vulnerability was found in Open WebUI up to 0.11.3. It has been rated as critical. This affects an unknown part of the file terminals.py of the component Terminal Proxy Route. This manipulation causes improper authorization.

This vulnerability is tracked as CVE-2026-109289. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More