Vulnerabilities

TI-2026-27616 CVE-2026-35487

text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication

MEDIUM 63

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00273 Published 2026-04-07 Fixed in 4.3 CWE-22

TI-2026-27615 CVE-2026-35486

HIGH 72

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00416 Published 2026-04-07 Fixed in 4.3 CWE-918

TI-2026-27614 CVE-2026-35485

HIGH 72

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00689 Published 2026-04-07 Fixed in 4.3 CWE-22

TI-2026-27613 CVE-2026-35484

MEDIUM 63

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00325 Published 2026-04-07 Fixed in 4.3 CWE-22

TI-2026-27612 CVE-2026-35483

MEDIUM 63

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00331 Published 2026-04-07 Fixed in 4.3 CWE-22

TI-2026-27253 CVE-2026-35050

HIGH 74

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00446 Published 2026-04-06 Fixed in 4.1.1 CWE-22

TI-2025-11458 CVE-2025-12487 · GHSA-qx32-gmjh-j7x6

MEDIUM 50

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00706 Published 2025-11-06 No fix listed CWE-807

TI-2025-11459 CVE-2025-12488 · GHSA-rrh4-6qqp-9mpv

MEDIUM 50

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00706 Published 2025-11-06 No fix listed CWE-807

TI-2025-38632 CVE-2025-62364

MEDIUM 61

text-generation-webui is an open-source web interface for running Large Language Models.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.0057 Published 2025-10-13 No fix listed CWE-59