Description
Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers to obtain user session cookies by receiving the full browser cookie jar on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal servers can capture forwarded session cookies from routine requests and replay them to hijack accounts, including administrators.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| open-webui | open-webui | 0.6.27 – < 0.11.4 | 0.11.4 |
References
- GitHub Security Advisory (GHSA-gqfh-jxvw-74rp) vendor-advisory
- Patch Commit patch
- Patch Commit patch
- Patch Commit patch
- VulnCheck Advisory: Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode Connections third-party-advisory