Vulnerabilities

TI-2026-27614 CVE-2026-35485

text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication

HIGH 72

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00689 Published 2026-04-07 Fixed in 4.3 CWE-22

TI-2026-27613 CVE-2026-35484

MEDIUM 63

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00325 Published 2026-04-07 Fixed in 4.3 CWE-22

TI-2026-27612 CVE-2026-35483

MEDIUM 63

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00331 Published 2026-04-07 Fixed in 4.3 CWE-22

TI-2026-27253 CVE-2026-35050

HIGH 74

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00446 Published 2026-04-06 Fixed in 4.1.1 CWE-22