OO
Vendor
oobabooga
15
CVEs
0
On KEV
0
New 30D
Products
TE9.8
text-generation-webui
oobabooga
9 CVEs0 on KEV0 new
TE8.8
Textgen
Oobabooga
4 CVEs0 on KEV0 new
TG7.5
Text Generation Web UI
Oobabooga
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-35487 | TE text-generation-webui oobabooga | 5.3 | Apr 7 | text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication |
| CVE-2026-35486 | TE text-generation-webui oobabooga | 7.5 | Apr 7 | text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation |
| CVE-2026-35485 | TE text-generation-webui oobabooga | 7.5 | Apr 7 | text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication |
| CVE-2026-35484 | TE text-generation-webui oobabooga | 5.3 | Apr 7 | text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication |
| CVE-2026-35483 | TE text-generation-webui oobabooga | 5.3 | Apr 7 | text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication |
| CVE-2026-35050 | TE text-generation-webui oobabooga | 8.8 | Apr 6 | text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml". |
| CVE-2025-12487 | TE text-generation-webui oobabooga | 9.8 | Nov 6 | oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability |
| CVE-2025-12488 | TE text-generation-webui oobabooga | 9.8 | Nov 6 | oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability |
| CVE-2025-62364 | TE text-generation-webui oobabooga | 6.2 | Oct 13 | text-generation-webui allows arbitrary file read via symbolic link upload |