diff --git a/backend/open_webui/utils/timers.py b/backend/open_webui/utils/timers.py
index 094a2130c8..d8be899dff 100644
--- a/backend/open_webui/utils/timers.py
+++ b/backend/open_webui/utils/timers.py
@@ -17,6 +17,7 @@ from open_webui.models.chat_messages import ChatMessages
 from open_webui.models.chats import Chat, ChatForm, Chats
 from open_webui.models.users import UserModel, Users
 from open_webui.tasks import has_active_tasks
+from open_webui.utils.auth import VERIFIED_USER_ROLES
 from open_webui.utils.json_codec import JSONCodec
 from open_webui.utils.misc import get_message_list
 from sqlalchemy import select
@@ -258,6 +259,11 @@ async def execute_due_timer(app, timer_id: str, claim_id: str | None = None) ->
             await _set_timer_state(timer_id, 'error', timer_error='timer user no longer exists')
             return
 
+        # Re-gate the rehydrated owner: a demoted owner must not run.
+        if user.role not in VERIFIED_USER_ROLES:
+            await _set_timer_state(timer_id, 'error', timer_error='owner no longer permitted to run timers')
+            return
+
         run = meta.get('run') or {}
         model_id = run.get('model_id') or meta.get('timer_model_id')
         if not model_id: