CVE-2026-70490 Details
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, the terminal WebSocket route in backend/open_webui/routers/terminals.py authenticated its own first-message JWT and never applied the verified-user role gate that get_verified_user enforces on HTTP terminal routes. An account whose role is pending, including a registered but unapproved account or an account deactivated back to pending, can open an interactive terminal session when at least one terminal server is configured and its access grants cover the account. This loses the account-approval boundary for terminal access while the HTTP terminal routes correctly reject the same account. This issue is fixed in 0.11.0.
A vulnerability in Open WebUI versions 0.8.8 prior to 0.11.0 allows unapproved accounts to access terminal sessions via a WebSocket route that lacks proper role verification. The issue arises because the WebSocket authentication process does not apply the same role checks as the HTTP terminal routes. As a result, accounts with a 'pending' status, whether newly registered or deactivated, can open interactive terminal sessions if at least one terminal server is configured to grant access. This bypasses the account-approval requirement for terminal access, creating a discrepancy between WebSocket and HTTP terminal permissions.
Users can upgrade to Open WebUI version 0.11.0 or later, where this vulnerability has been fixed. The update consolidates the authentication process to include token decoding, revocation checking, user verification, and role validation, ensuring that the WebSocket terminal route aligns with the same authorization standards as the HTTP terminal endpoints.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/open-webui/open-webui/security/advisories/GHSA-5gpj-vj23-vhhv | [email protected] | PatchVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| openwebui open webui | >= 0.8.8, < 0.11.0 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 18, 2026 | Initial Analysis | [email protected] |
| Aug 5, 2026 | CVE Modified | CISA-ADP |
| Aug 4, 2026 | New CVE Received | [email protected] |