oobabooga

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

oobabooga records in CISA KEV

No oobabooga vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Textgen 4 records HIGH Text Generation Web Ui 2 records HIGH

Records

9 records

TI-2026-27253 CVE-2026-35050

Path traversal in oobabooga text-generation-webui

HIGH 74

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00446 Published 2026-04-06 Fixed in 4.1.1 CWE-22

TI-2026-27615 CVE-2026-35486

text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation

HIGH 72

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00416 Published 2026-04-07 Fixed in 4.3 CWE-918

TI-2026-27614 CVE-2026-35485

text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication

HIGH 72

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00689 Published 2026-04-07 Fixed in 4.3 CWE-22

TI-2026-27616 CVE-2026-35487

text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication

MEDIUM 63

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2026-04-07 Fixed in 4.3 CWE-22

TI-2026-27613 CVE-2026-35484

text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication

MEDIUM 63

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00325 Published 2026-04-07 Fixed in 4.3 CWE-22

TI-2026-27612 CVE-2026-35483

text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication

MEDIUM 63

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00331 Published 2026-04-07 Fixed in 4.3 CWE-22

TI-2025-38632 CVE-2025-62364

text-generation-webui allows arbitrary file read via symbolic link upload

MEDIUM 61

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0057 Published 2025-10-13 No fix listed CWE-59

TI-2025-11459 CVE-2025-12488 · GHSA-rrh4-6qqp-9mpv

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote…

MEDIUM 50

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00706 Published 2025-11-06 No fix listed CWE-807

TI-2025-11458 CVE-2025-12487 · GHSA-qx32-gmjh-j7x6

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote…

MEDIUM 50

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00706 Published 2025-11-06 No fix listed CWE-807

Open these records in search →