CVE-2026-35486

text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user-supplied URLs via requests.get() with zero validation — no scheme check, no IP filtering, no hostname allowlist. An attacker can access cloud metadata endpoints, steal IAM credentials, and probe internal services. The fetched content is exfiltrated through the RAG pipeline. This vulnerability is fixed in 4.3.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2	Exploit Vendor Advisory
https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:oobabooga:text_generation_web_ui:*:*:*:*:*:*:*:*

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) text-generation-webui es una interfaz web de código abierto para ejecutar Modelos de Lenguaje Grandes. Antes de la versión 4.3, las extensiones RAG superbooga y superboogav2 recuperan URLs proporcionadas por el usuario a través de requests.get() sin ninguna validación - sin verificación de esquema, sin filtrado de IP, sin lista blanca de nombres de host. Un atacante puede acceder a puntos finales de metadatos en la nube, robar credenciales de IAM y sondear servicios internos. El contenido recuperado es exfiltrado a través del pipeline RAG. Esta vulnerabilidad está corregida en la versión 4.3.

Information

Published : 2026-04-07 16:16

Updated : 2026-10-26 21:10

NVD link : CVE-2026-35486

Mitre link : CVE-2026-35486

CVE.ORG link : CVE-2026-35486

JSON object : View

Products Affected

oobabooga

text_generation_web_ui

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2026-35486", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35486", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-09T14:37:28.632194Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "oobabooga", "product": "text-generation-webui", "versions": [{"status": "affected", "version": "< 4.3"}]}]}], "published": "2026-04-07T16:16:26.700", "references": [{"url": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2", "tags": ["Exploit", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user-supplied URLs via requests.get() with zero validation \u2014 no scheme check, no IP filtering, no hostname allowlist. An attacker can access cloud metadata endpoints, steal IAM credentials, and probe internal services. The fetched content is exfiltrated through the RAG pipeline. This vulnerability is fixed in 4.3."}, {"lang": "es", "value": "text-generation-webui es una interfaz web de c\u00f3digo abierto para ejecutar Modelos de Lenguaje Grandes. Antes de la versi\u00f3n 4.3, las extensiones RAG superbooga y superboogav2 recuperan URLs proporcionadas por el usuario a trav\u00e9s de requests.get() sin ninguna validaci\u00f3n - sin verificaci\u00f3n de esquema, sin filtrado de IP, sin lista blanca de nombres de host. Un atacante puede acceder a puntos finales de metadatos en la nube, robar credenciales de IAM y sondear servicios internos. El contenido recuperado es exfiltrado a trav\u00e9s del pipeline RAG. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 4.3."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oobabooga:text_generation_web_ui:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B0114B9-7FD7-45A2-9103-936373FF3445", "versionEndExcluding": "4.3"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}