CVE-2026-59221 Details
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 before 0.10.0, _sanitize_proxy_path in backend/open_webui/routers/terminals.py decoded proxy paths only eight times, allowing a nine-times percent-encoded ../ traversal value to pass normalization checks and be decoded by the upstream terminal server. This issue is fixed in version 0.10.0.
A path traversal vulnerability has been identified in Open WebUI versions 0.9.6 prior to 0.10.0. The issue arises in the terminal proxy path sanitization process, where the decoder only processes the path eight times. This limitation allows a nine-times percent-encoded traversal value to bypass normalization checks and be forwarded to the upstream terminal server, potentially accessing restricted paths.
Users are advised to update to Open WebUI version 0.10.0 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-frvj-c5qp-xj4w | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/open-webui/open-webui/commit/05098d25a58d03738e01c4e85e8852c3b4ad849c | [email protected] | Patch |
| https://github.com/open-webui/open-webui/pull/26050 | [email protected] | Issue TrackingPatch |
| https://github.com/open-webui/open-webui/releases/tag/v0.10.0 | [email protected] | ProductRelease Notes |
| https://github.com/open-webui/open-webui/security/advisories/GHSA-frvj-c5qp-xj4w | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | 0.9.6 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 10, 2026 | Initial Analysis | [email protected] |
| Jul 9, 2026 | CVE Modified | CISA-ADP |
| Jul 9, 2026 | New CVE Received | [email protected] |