https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 11:38:21 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-109572 <p>Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop other users&#39; terminals and modify terminal policies, injecting environment variables into other users&#39; terminals.</p> <p>Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop other users&#39; terminals and modify terminal policies, injecting environment variables into other users&#39; terminals.</p> https://db.gcve.eu/vuln/fkie_cve-2026-109572 https://db.gcve.eu/vuln/ghsa-865q-vfjv-p93j <p>Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop other users&#39; terminals and modify terminal policies, injecting environment variables into other users&#39; terminals.</p> <p>Open WebUI from 0.8.6 before 0.11.4 contains a privilege escalation vulnerability in the terminal proxy that allows authenticated users to reach the Terminals administrator API with the shared key attached. Attackers can send requests through /api/v1/terminals/{server_id}/{path} to list or stop other users&#39; terminals and modify terminal policies, injecting environment variables into other users&#39; terminals.</p> https://db.gcve.eu/vuln/ghsa-865q-vfjv-p93j