TE
Product
text-generation-webui
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 4Low 0
Watch
Add text-generation-webui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-35050 | 8.8 | Apr 6 | text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml". Affected: < 4.1.1 |
| CVE-2026-35486 | 7.5 | Apr 7 | text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation Affected: < 4.3 |
| CVE-2026-35485 | 7.5 | Apr 7 | text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication Affected: < 4.3 |
Showing 3