Approved changes feed: RSS · Atom
cpe:2.3:a:oobabooga:textgen:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Oobabooga (745ccf0a-f12b-52b2-9bb8-c9c72c0c39c4) |
|---|---|
| Product | Textgen (6bd95e92-7a6e-5538-9719-cacef8e540f6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/oobabooga/textgen |
purl2cpe | 2026-07-28 16:41:00.102246 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-35485 |
vulnerable | 2026-06-08 07:59:14.049489 |
text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication
HIGH (7.5)
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_grammar() allows reading any file on the server filesystem with no extension restriction. Gradio does not server-side validate dropdown values, so an attacker can POST directory traversal payloads (e.g., ../../../etc/passwd) via the API and receive the full file contents in the response. This vulnerability is fixed in 4.3.
Published: 2026-04-07T14:47:37.593Z
Updated: 2026-04-07T15:58:51.812Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35484 |
vulnerable | 2026-06-08 07:59:14.048996 |
text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication
MEDIUM (5.3)
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_preset() allows reading any .yaml file on the server filesystem. The parsed YAML key-value pairs (including passwords, API keys, connection strings) are returned in the API response. This vulnerability is fixed in 4.3.
Published: 2026-04-07T14:46:42.351Z
Updated: 2026-04-08T14:46:53.620Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35483 |
vulnerable | 2026-06-08 07:59:14.048720 |
text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication
MEDIUM (5.3)
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_template() allows reading files with .jinja, .jinja2, .yaml, or .yml extensions from anywhere on the server filesystem. For .jinja files the content is returned verbatim; for .yaml files a parsed key is extracted. This vulnerability is fixed in 4.3.
Published: 2026-04-07T14:45:07.141Z
Updated: 2026-04-07T17:55:20.808Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-35050 |
vulnerable | 2026-06-08 07:59:13.446450 |
text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml".
CRITICAL (9.1)
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, this python file can be triggered to get executed from "Model" menu when requesting to download a new model. This vulnerability is fixed in 4.1.1.
Published: 2026-04-06T17:30:20.513Z
Updated: 2026-04-07T14:30:04.932Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.