CVE-2026-59221CWE-22CWE-918

open-webui terminal proxy path traversal guard bypass via 9x encoded traversal

High · published July 9, 2026

CVSS v3.1
7.7
EPSS
0%
Percentile
40.7
In the wild
Unconfirmed
What it is

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 before 0.10.0, _sanitize_proxy_path in backend/open_webui/routers/terminals.py decoded proxy paths only eight times, allowing a nine-times percent-encoded ../ traversal value to pass normalization checks and be decoded by the upstream terminal server. This issue is fixed in version 0.10.0.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00483 · 40.7th percentile
Weaknesses
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-918 · Server-Side Request Forgery (SSRF)
Published
2026-07-09T17:13Z
EPSS history
Timeline
  • 09 JUL 17:13Z
    open-webui terminal proxy path traversal guard bypass via 9x encoded traversal
    cvelistv5