Oobabooga Text-generation-webui
9 CVEs affecting Oobabooga Text-generation-webui. Latest disclosed: 2026-04-07. Critical: 3, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-12487 | Critical | 9.8 | 2025-11-06 | oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers… |
CVE-2025-12488 | Critical | 9.8 | 2025-11-06 | oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers… |
CVE-2026-35050 | Critical | 9.1 | 2026-04-06 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and i… |
CVE-2026-35485 | High | 7.5 | 2026-04-07 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_… |
CVE-2026-35486 | High | 7.5 | 2026-04-07 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user… |
CVE-2025-62364 | Medium | 6.2 | 2025-10-13 | text-generation-webui is an open-source web interface for running Large Language Models. In versions through 3.13, a Local File Inclusion vulnerability exists… |
CVE-2026-35484 | Medium | 5.3 | 2026-04-07 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_… |
CVE-2026-35487 | Medium | 5.3 | 2026-04-07 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_… |
CVE-2026-35483 | Medium | 5.3 | 2026-04-07 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_… |