Log in Start free

oobabooga

Products

ProductCVEsExploitedLatest
text-generation-webui9–Apr 7, 2026

Exploited and recent CVEs

  • CVE-2026-35487 Medium 5.3 text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication 0.3%
  • CVE-2026-35486 High 7.5 text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation 0.4%
  • CVE-2026-35485 High 7.5 text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication 0.7%
  • CVE-2026-35484 Medium 5.3 text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication 0.3%
  • CVE-2026-35483 Medium 5.3 text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication 0.3%
  • CVE-2026-35050 Critical 9.1 text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml". 0.4%
  • CVE-2025-12487 Critical 9.8 oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability 0.7%
  • CVE-2025-12488 Critical 9.8 oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability 0.7%
  • CVE-2025-62364 Medium 6.2 text-generation-webui allows arbitrary file read via symbolic link upload 0.6%