Read the docs
TI-2025-38632 Aliases CVE-2025-62364

text-generation-webui allows arbitrary file read via symbolic link upload

Priority MEDIUM 61CWE-59Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-59 and the CVSS impact.

Summary

text-generation-webui is an open-source web interface for running Large Language Models. In versions through 3.13, a Local File Inclusion vulnerability exists in the character picture upload feature. An attacker can upload a text file containing a symbolic link to an arbitrary file path. When the application processes the upload, it follows the symbolic link and serves the contents of the targeted file through the web interface. This allows an unauthenticated attacker to read sensitive files on the server, potentially exposing system configurations, credentials, and other confidential information. This vulnerability is fixed in 3.14. No known workarounds exist.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0057 47th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
oobaboogatext-generation-webuiup to 3.13—No fix listedCNA
  • text-generation-webui Vendoroobabooga Affected up to 3.13 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-62364

References

Other 2

  • TI-2026-27253 Path traversal in oobabooga text-generation-webui CVSS 3.1CRITICAL 9.1
  • TI-2026-27615 text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation CVSS 3.1HIGH 7.5
  • TI-2026-27614 text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication CVSS 3.1HIGH 7.5
  • TI-2026-27616 text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication CVSS 3.1MEDIUM 5.3
  • TI-2026-27613 text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication CVSS 3.1MEDIUM 5.3
  • TI-2026-27612 text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication CVSS 3.1MEDIUM 5.3
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences