What is the CVSS score of CVE-2026-59224?

CVE-2026-59224 has a CVSS 3.1 base score of 8.0 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Open WebUI are affected by CVE-2026-59224?

Open WebUI versions before 0.10.0 contain an identity spoofing vulnerability allowing authenticated users to hijack other users' terminal sessions and gain unauthorized access to sensitive…. A patch is available.

How to fix or mitigate CVE-2026-59224?

Within 24 hours: Identify all Open WebUI instances and document current versions. Within 7 days: Deploy Open WebUI v0.10.0 or later to all systems. Within 30 days: Review terminal session access logs covering 90 days prior to patching to identify unauthorized session activity.

Open WebUI CVE-2026-59224

EUVD-2026-42636 HIGH

Improper Authentication (CWE-287)

2026-07-09 security-advisories@github.com

Authentication Bypass Open Webui

8.0

CVSS 3.1 · Vendor: github

Severity by source

Vendor (github) PRIMARY

8.0 HIGH

AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

vuln.today AI

8.5 HIGH

Network-reachable identity spoof needing a low-privileged account (PR:L) and non-trivial injection crafting (AC:H); crossing into another user's identity is a scope change (S:C) with full C/I/A impact on the victim's terminal session.

3.1 AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

4.0 AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (github).

CVSS VectorVendor: github

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jul 09, 2026 - 18:01 EUVD

Analysis Generated

Jul 09, 2026 - 17:35 vuln.today

DescriptionCVE.org

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, backend/open_webui/routers/terminals.py built the ws_terminal upstream URL from an unencoded session_id and appended user_id as a query parameter, allowing query injection to make the terminal backend resolve another user identity; the HTTP proxy path also forwarded X-User-Id as an integrity-unbound identity claim. This issue is fixed in version 0.10.0.

AnalysisAI

Identity spoofing in Open WebUI before 0.10.0 lets an authenticated low-privileged user impersonate another account by injecting query parameters into the terminal WebSocket URL. Because backend/open_webui/routers/terminals.py built the ws_terminal upstream URL from an unencoded session_id and appended user_id as a query parameter - while the HTTP proxy path trusted an integrity-unbound X-User-Id header - an attacker can make the terminal backend resolve a different user identity, gaining that victim's terminal session context. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Authenticate as low-privileged user

Delivery

Craft malicious session_id in terminal request

Exploit

Inject user_id query param or forge X-User-Id

Execution

Backend resolves victim identity

Impact

Gain victim terminal session context

Access

Authenticate as low-privileged user

Delivery

Craft malicious session_id in terminal request

Exploit

Inject user_id query param or forge X-User-Id

Execution

Backend resolves victim identity

Impact

Gain victim terminal session context

Vulnerability AssessmentAI

Exploitation	Exploitation requires an authenticated Open WebUI account (CVSS PR:L) and an instance that exposes the terminal feature (the ws_terminal WebSocket endpoint in terminals.py). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 vector (AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H, base 8.0) describes a high-impact but non-trivial attack: network-reachable, but requiring an existing low-privileged account (PR:L), high attack complexity (AC:H) to craft the injection and win the identity resolution, and user interaction (UI:R). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker holding a valid low-privileged Open WebUI account opens a terminal session and supplies a crafted session_id containing extra 'user_id=' query material (or forges the X-User-Id header on the HTTP proxy path). Because the backend concatenates the unencoded value into the upstream WebSocket URL and trusts the resulting user_id, the terminal backend resolves the attacker to a targeted victim's identity, granting that user's terminal session context. …
Remediation	Vendor-released patch: upgrade to Open WebUI 0.10.0 or later, which URL-encodes session identifiers and stops trusting the client-supplied X-User-Id claim (see advisory https://github.com/open-webui/open-webui/security/advisories/GHSA-j657-m4c4-24jq and release https://github.com/open-webui/open-webui/releases/tag/v0.10.0). … Detailed patch versions, workarounds, and compensating controls in full report.