{"data":{"id":"abcbf077-ae54-44bb-8372-d077a686a808","title":"CVE-2026-109292: Open WebUI from 0.6.27 before 0.11.4 contains an information disclosure vulnerability that allows destination servers…","summary":"Open WebUI from 0.6.27 before 0.11.4 forwards the full browser cookie jar to destination servers on OAuth-mode connections. Operators of OpenAI-compatible connections, OpenAPI tool servers or terminal servers can capture forwarded session cookies from routine requests and replay them to hijack accounts, including administrator accounts.","solution":"Fixed in 0.11.4.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-109292","publishedAt":"2026-10-12T17:17:22.500Z","cveId":"CVE-2026-109292","cweIds":["CWE-200"],"cvssScore":"6.8","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Open WebUI","OpenAI-compatible connections","OpenAPI tool servers","terminal servers"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Open WebUI information disclosure exposing session cookies on OAuth connections","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","attackVector":"network","attackComplexity":"high","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-12T18:08:44.538Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-12T18:08:48.585Z","patchAvailable":null,"disclosureDate":"2026-10-12T17:17:22.500Z","capecIds":["CAPEC-116"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null}}