Open WebUI 0.8.6 through 0.11.3: the terminal proxy /api/v1/terminals/{server_id}/{path} in backend/open_webui/routers/terminals.py forwarded any requested path to the Terminals orchestrator with the administrator-configured shared bearer key attached. An ordinary user who has been granted access to a bearer-authenticated, non-policy-pinned Terminals connection could call the Terminals administrator API through it to read and change terminal policies, list all users' terminals with their owners, and stop other users' terminals. Terminals servers 0.2.4 and later reject such requests independently. Fixed in 0.11.4.