Open WebUI: Realtime endpoints accept Redis-revoked JWTs after signout/backchannel logout
Open WebUI
More for Open WebUI RSS feed for Open WebUI
- Severity
- High, CVSS 7.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
- Record
- CVE-2026-59219
- Affects
- Open WebUI
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- July 9, 2026
- Source last modified
- July 24, 2026
Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.0 before 0.10.0 with Redis configured, Socket.IO connect, user-join, join-channels, join-note, and the terminal websocket first-message authentication used decode_token without the Redis-backed is_valid_token revocation check, allowing revoked JWTs to continue authenticating realtime connections. This issue is fixed in version 0.10.0.
Description quoted from the NVD record.
Who is affected
Open WebUI is a chat interface for AI models that organizations run on their own servers. This flaw affects versions 0.9.0 up to but not including 0.10.0, when the product is set up to use Redis (an add-on for storing data). In those setups, the live connection features, such as channels, notes and the built-in terminal, do not check whether a login has been canceled. Someone holding a login token that should no longer work, for example after the user signed out or was logged out, could keep using these live features. This flaw is rated High.
What to do
- If someone on your staff installed or runs Open WebUI, ask them to check which version is in use and whether it is set up to use Redis.
- If the version is 0.9.0 or later but before 0.10.0, have them update to version
0.10.0, which fixes this flaw. - If an IT provider or vendor runs Open WebUI for your organization, send them this advisory and ask when the update will be done.
- Until the update is done, remember that signing a user out of these versions may not fully cut off their access to the live features.
Analysis written from the source record as of July 24, 2026 and reviewed before publishing.