CVE-2026-35485

text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_grammar() allows reading any file on the server filesystem with no extension restriction. Gradio does not server-side validate dropdown values, so an attacker can POST directory traversal payloads (e.g., ../../../etc/passwd) via the API and receive the full file contents in the response. This vulnerability is fixed in 4.3.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-hqg5-487v-5mc6	Exploit Vendor Advisory
https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-hqg5-487v-5mc6	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:oobabooga:textgen:*:*:*:*:*:*:*:*

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) text-generation-webui es una interfaz web de código abierto para ejecutar Modelos de Lenguaje Grandes. Antes de la versión 4.3, una vulnerabilidad de salto de ruta no autenticada en load_grammar() permite leer cualquier archivo en el sistema de archivos del servidor sin restricción de extensión. Gradio no valida los valores de los desplegables en el lado del servidor, por lo que un atacante puede enviar cargas útiles de salto de directorio (por ejemplo, .. / .. / .. / etc/p4ssd) a través de la API y recibir el contenido completo del archivo en la respuesta. Esta vulnerabilidad está corregida en la versión 4.3.

Information

Published : 2026-04-07 15:17

Updated : 2026-10-26 21:10

NVD link : CVE-2026-35485

Mitre link : CVE-2026-35485

CVE.ORG link : CVE-2026-35485

JSON object : View

Products Affected

oobabooga

textgen

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-35485", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35485", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-07T15:11:37.214994Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "oobabooga", "product": "text-generation-webui", "versions": [{"status": "affected", "version": "< 4.3"}]}]}], "published": "2026-04-07T15:17:45.677", "references": [{"url": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-hqg5-487v-5mc6", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-hqg5-487v-5mc6", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_grammar() allows reading any file on the server filesystem with no extension restriction. Gradio does not server-side validate dropdown values, so an attacker can POST directory traversal payloads (e.g., ../../../etc/passwd) via the API and receive the full file contents in the response. This vulnerability is fixed in 4.3."}, {"lang": "es", "value": "text-generation-webui es una interfaz web de c\u00f3digo abierto para ejecutar Modelos de Lenguaje Grandes. Antes de la versi\u00f3n 4.3, una vulnerabilidad de salto de ruta no autenticada en load_grammar() permite leer cualquier archivo en el sistema de archivos del servidor sin restricci\u00f3n de extensi\u00f3n. Gradio no valida los valores de los desplegables en el lado del servidor, por lo que un atacante puede enviar cargas \u00fatiles de salto de directorio (por ejemplo, .. / .. / .. / etc/p4ssd) a trav\u00e9s de la API y recibir el contenido completo del archivo en la respuesta. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 4.3."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oobabooga:textgen:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9A2B642B-80A8-46E1-931D-C5541264290A", "versionEndExcluding": "4.3"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}