The vulnerability is a privilege escalation flaw in the terminal proxy of Open WebUI versions 0.8.6 through 0.11.3. Authenticated users can exploit the shared key that accompanies the API endpoint /api/v1/terminals/{server_id}/{path} to reach the Terminals administrator API. Through this path an attacker can list, stop, or modify other users' terminals, inject environment variables and alter terminal policies, effectively gaining elevated control over other users’ terminal sessions.

The affected product is Open WebUI by open-webui. Any deployment running version 0.8.6 up to (but not including) 0.11.4 is vulnerable.

The CVSS score of 7.2 indicates a high-impact privilege escalation, but the EPSS score is not available, so the current likelihood of exploitation is uncertain. The vulnerability is accessible via a web API and requires that the user has authenticated access, implying that compromised credentials or legitimate user accounts could be leveraged. The issue is not listed in the CISA KEV catalog, but because the exploitation path is remote, the risk remains significant if the application is exposed to untrusted networks.