---
id: CVE-2026-109289
title: >-
  Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization
  vulnerability that allows deactivated users to keep executing terminal
  commands through an already open terminal WebSocket
summary: >-
  Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization
  vulnerability that allows deactivated users to keep executing terminal
  commands through an already open terminal WebSocket. Because the terminal
  proxy route in termin…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-613
published: '2026-10-12'
updated: '2026-10-13'
sourceUpdated: '2026-10-13T20:39:48.767'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-109289'
references:
  - url: >-
      https://github.com/open-webui/open-webui/security/advisories/GHSA-6g45-8g27-fh8q
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/open-webui-0.8.8-before-0.11.4-improper-session-revocation-via-terminal-websocket
    label: disclosure@vulncheck.com
tags:
  - nvd
epss: 0.00214
epssPercentile: 0.10899
ingestedAt: '2026-10-12T18:00:08.190Z'
---

## Overview

Open WebUI from 0.8.8 before 0.11.4 contains an improper authorization vulnerability that allows deactivated users to keep executing terminal commands through an already open terminal WebSocket. Because the terminal proxy route in terminals.py checks access only on the first message, deactivated users can keep running commands and reading or writing files on the terminal server.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.