Login Request a demo
High severity · published Apr 6, 2026
CVE-2026-35050
text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml".
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, this python file can be triggered to get executed from "Model" menu when requesting to download a new model. This vulnerability is fixed in 4.1.1.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TE
text-generation-webui · oobabooga
< 4.1.1 · source: vendor
TE
Textgen · Oobabooga
before 4.1.1 · source: NVD
Affected product
TE
text-generation-webui
oobabooga
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-35050
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-35050
Exploit
https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jg96-p5p6-q3cv
More from text-generation-webui
9.8
CVE-2025-12487
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
9.8
CVE-2025-12488
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
7.5
CVE-2026-35486
text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation
7.5
CVE-2026-35485
text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication
6.2
CVE-2025-62364
text-generation-webui allows arbitrary file read via symbolic link upload