CVE-2026-109292

Published: Ott 12, 2026 Last Modified: Ott 12, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,6
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: passive
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM 6,8
Source: [email protected]
Attack Vector: network
Attack Complexity: high
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: none

Description

AI Translation Available

Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal servers can capture forwarded session cookies from routine requests and replay them to hijack accounts, including administrators.

200

Exposure of Sensitive Information to an Unauthorized Actor

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Confidentiality
Potential Impacts:
Read Application Data
Applicable Platforms
Technologies: Not Technology-Specific, Web Based, Mobile
Likelihood of Exploit: High
View CWE Details
https://github.com/open-webui/open-webui/commit/3cda47cdb44…
https://github.com/open-webui/open-webui/commit/3cda47cdb449aac970426f0929c9e5f…
https://github.com/open-webui/open-webui/commit/b71744b1782…
https://github.com/open-webui/open-webui/commit/b71744b17823f7a3a9a64cb363e79a7…
https://github.com/open-webui/open-webui/commit/f9f815c8622…
https://github.com/open-webui/open-webui/commit/f9f815c86220f809fad5ee1300c44f5…
https://github.com/open-webui/open-webui/security/advisorie…
https://github.com/open-webui/open-webui/security/advisories/GHSA-gqfh-jxvw-74rp
https://www.vulncheck.com/advisories/open-webui-0.6.27-befo…
https://www.vulncheck.com/advisories/open-webui-0.6.27-before-0.11.4-session-to…