What’s Vulnerable › Products

oobabooga text-generation-webui vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your oobabooga text-generation-webui version is affected

Latest oobabooga text-generation-webui vulnerabilities

• CVE-2026-35487 — text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication (CVSS 5.3)
• CVE-2026-35486 — text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation (CVSS 7.5)
• CVE-2025-12488 — oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2025-12487 — oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability (CVSS 9.8)
• CVE-2025-62364 — text-generation-webui allows arbitrary file read via symbolic link upload (CVSS 6.2)