CVE-2026-35487

text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_prompt() allows reading any .txt file on the server filesystem. The file content is returned verbatim in the API response. This vulnerability is fixed in 4.3.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-mfgg-vvc6-vqq7	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:oobabooga:text_generation_web_ui:*:*:*:*:*:*:*:*

History

25 Oct 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) text-generation-webui es una interfaz web de código abierto para ejecutar Grandes Modelos de Lenguaje. Antes de la versión 4.3, una vulnerabilidad de salto de ruta no autenticado en load_prompt() permite leer cualquier archivo .txt en el sistema de archivos del servidor. El contenido del archivo se devuelve textualmente en la respuesta de la API. Esta vulnerabilidad se corrigió en la versión 4.3.

Information

Published : 2026-04-07 16:16

Updated : 2026-10-25 23:10

NVD link : CVE-2026-35487

Mitre link : CVE-2026-35487

CVE.ORG link : CVE-2026-35487

JSON object : View

Products Affected

oobabooga

text_generation_web_ui

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-35487", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35487", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-07T18:14:36.824791Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "oobabooga", "product": "text-generation-webui", "versions": [{"status": "affected", "version": "< 4.3"}]}]}], "published": "2026-04-07T16:16:26.853", "references": [{"url": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-mfgg-vvc6-vqq7", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_prompt() allows reading any .txt file on the server filesystem. The file content is returned verbatim in the API response. This vulnerability is fixed in 4.3."}, {"lang": "es", "value": "text-generation-webui es una interfaz web de c\u00f3digo abierto para ejecutar Grandes Modelos de Lenguaje. Antes de la versi\u00f3n 4.3, una vulnerabilidad de salto de ruta no autenticado en load_prompt() permite leer cualquier archivo .txt en el sistema de archivos del servidor. El contenido del archivo se devuelve textualmente en la respuesta de la API. Esta vulnerabilidad se corrigi\u00f3 en la versi\u00f3n 4.3."}], "lastModified": "2026-10-25T23:10:00.167", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oobabooga:text_generation_web_ui:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B0114B9-7FD7-45A2-9103-936373FF3445", "versionEndExcluding": "4.3"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}