CyberRota Analysis
AI-GeneratedThe Open WebUI platform versions 0.6.27 to 0.11.1 are vulnerable due to improper handling of session cookies, which can lead to session hijacking when multiple tool servers are used. This allows an attacker operating a different server to reuse the victim's session, potentially compromising user accounts. Organizations using affected versions should prioritize upgrading to version 0.11.1 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.6.27 until 0.11.1, backend/open_webui/utils/tools.py captured a cookie jar from the enclosing connection loop instead of binding it to each external tool callable. When multiple tool servers were attached and a session or system OAuth connection was processed last, a request to a different server configured for bearer authentication could include the calling user's Open WebUI session cookies, allowing that server's operator to reuse the session and take over the account. This issue is fixed in version 0.11.1.