CVE-2026-109292: Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections

Q: Which deployments are exposed?

Open WebUI versions from 0.6.27 up to, but not including, 0.11.4 are affected when they use OAuth-mode connections. Relevant destination types include OpenAI-compatible connections, OpenAPI tool servers, and terminal servers.

Q: What does an attacker need to exploit this?

The attacker needs to operate or control a destination server used through an OAuth-mode connection and receive requests from an Open WebUI user. The vulnerability can expose the user's full browser cookie jar to that destination, allowing session-cookie replay.

Q: What is the impact if an exposed connection is malicious or compromised?

The destination server can capture forwarded session cookies and replay them to hijack user accounts. This includes the possibility of hijacking administrator accounts.

Published Oct 12, 2026

Updated

Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal servers can capture forwarded session cookies from routine requests and replay them to hijack accounts, including administrators.

Affected Software

1 affected component

Open WebUI Open WebUI>=0.6.27<0.11.4

Event History

Oct 12, 2026

CVE Published

via MITRE·04:04 PM

Data Sourced

via MITRE·04:04 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are exposed?

Open WebUI versions from 0.6.27 up to, but not including, 0.11.4 are affected when they use OAuth-mode connections. Relevant destination types include OpenAI-compatible connections, OpenAPI tool servers, and terminal servers.

What does an attacker need to exploit this?

The attacker needs to operate or control a destination server used through an OAuth-mode connection and receive requests from an Open WebUI user. The vulnerability can expose the user's full browser cookie jar to that destination, allowing session-cookie replay.

What is the impact if an exposed connection is malicious or compromised?

The destination server can capture forwarded session cookies and replay them to hijack user accounts. This includes the possibility of hijacking administrator accounts.

CVE-2026-109292: Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections

Affected Software

Event History

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this?

What is the impact if an exposed connection is malicious or compromised?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this?

What is the impact if an exposed connection is malicious or compromised?