Login Request a demo
Critical severity · published Nov 6, 2025
CVE-2025-12487
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
9.8
CVSS
0.7%
EPSS
No
On KEV
Description
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the trust_remote_code parameter provided to the join endpoint. The issue results from the lack of proper validation of a user-supplied argument before using it to load a model. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26681.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TE
text-generation-webui · oobabooga
2.5 · source: vendor
Affected product
TE
text-generation-webui
oobabooga
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-12487
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-12487
github.com
https://github.com/oobabooga/text-generation-webui/commit/b5a6904c4ac4049823396090360b6f566f4e4603
www.zerodayinitiative.com
https://www.zerodayinitiative.com/advisories/ZDI-25-982/
More from text-generation-webui
9.8
CVE-2025-12488
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
8.8
CVE-2026-35050
text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml".
7.5
CVE-2026-35486
text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation
7.5
CVE-2026-35485
text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication
6.2
CVE-2025-62364
text-generation-webui allows arbitrary file read via symbolic link upload