Vulnerability Details CVE-2026-59221
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 before 0.10.0, _sanitize_proxy_path in backend/open_webui/routers/terminals.py decoded proxy paths only eight times, allowing a nine-times percent-encoded ../ traversal value to pass normalization checks and be decoded by the upstream terminal server. This issue is fixed in version 0.10.0.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 28.3%
CVSS Severity
CVSS v3 Score 7.7
References
- https://github.com/open-webui/open-webui/commit/05098d25a58d03738e01c4e85e8852c3b4ad849c
- https://github.com/open-webui/open-webui/pull/26050
- https://github.com/open-webui/open-webui/releases/tag/v0.10.0
- https://github.com/open-webui/open-webui/security/advisories/GHSA-frvj-c5qp-xj4w
- https://github.com/open-webui/open-webui/security/advisories/GHSA-frvj-c5qp-xj4w
Products affected by CVE-2026-59221
-
cpe:2.3:a:openwebui:open_webui:0.9.6