What’s Vulnerable › Products
oobabooga Textgen vulnerabilities
4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.
Check whether your oobabooga Textgen version is affected
Latest oobabooga Textgen vulnerabilities
- CVE-2026-35485 — text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication (CVSS 7.5)
- CVE-2026-35484 — text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication (CVSS 5.3)
- CVE-2026-35483 — text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication (CVSS 5.3)
- CVE-2026-35050 — text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml". (CVSS 8.8)