p PatchFirst

CVE-2026-59221

CVE-2026-59221 · open-webui terminal proxy path traversal guard bypass via 9x encoded traversal

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 before 0.10.0, _sanitize_proxy_path in backend/open_webui/routers/terminals.py decoded proxy paths only eight times, allowing a nine-times percent-encoded ../ traversal value to pass normalization checks and be decoded by the upstream terminal server. This issue is fixed in version 0.10.0.

CVSS 7.7 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • open-webui

    Versions
    • >= 0.9.6, < 0.10.0: Affected

    No fix published

  • open-webui PyPI

    Versions
    • 0.9.6
    Affected ranges
    • ECOSYSTEM: ≥ 0.9.6, < 0.10.0

    Update to 0.10.0

Original sources

Check your server →