CVE-2026-59221

EUVD-2026-42650
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 before 0.10.0, _sanitize_proxy_path in backend/open_webui/routers/terminals.py decoded proxy paths only eight times, allowing a nine-times percent-encoded ../ traversal value to pass normalization checks and be decoded by the upstream terminal server. This issue is fixed in version 0.10.0.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.7 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 29.47%
Affected Products (NVD)
VendorProductVersion
openwebuiopen_webui
0.9.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/open-webui/open-webui/commit/05098d25a58d03738e01c4e85e8852c3b4ad849c
https://github.com/open-webui/open-webui/pull/26050
https://github.com/open-webui/open-webui/releases/tag/v0.10.0
https://github.com/open-webui/open-webui/security/advisories/GHSA-frvj-c5qp-xj4w
https://github.com/open-webui/open-webui/security/advisories/GHSA-frvj-c5qp-xj4w