Vulnerabilidades do Oobabooga Textgen
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oobabooga Textgen: 4 registro(s), com versões afetadas e correções.cpe:2.3:a:oobabooga:textgen
CVE-2026-35485
Alta · 7.5
CWE-22 07/04/2026
text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_grammar() allows reading any file on the server filesystem with no extension restriction. Gradio does not server-side validate dropdown values, so an attacker can POST directory traversal payloads (e.g., ../../../etc/passwd) via the API and receive the full file contents in the response. This vulnerability is fixed in 4.3.
CVE-2026-35484
Média · 5.3
CWE-22 07/04/2026
text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_preset() allows reading any .yaml file on the server filesystem. The parsed YAML key-value pairs (including passwords, API keys, connection strings) are returned in the API response. This vulnerability is fixed in 4.3.
CVE-2026-35483
Média · 5.3
CWE-22 07/04/2026
text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_template() allows reading files with .jinja, .jinja2, .yaml, or .yml extensions from anywhere on the server filesystem. For .jinja files the content is returned verbatim; for .yaml files a parsed key is extracted. This vulnerability is fixed in 4.3.
CVE-2026-35050
Alta · 8.8
CWE-22 06/04/2026
text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml".
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, this python file can be triggered to get executed from "Model" menu when requesting to download a new model. This vulnerability is fixed in 4.1.1.