CVE-2026-35487

MEDIUM

text-generation-webui <4.3 load_prompt() - Path Traversal

Title source: manual

Description

text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_prompt() allows reading any .txt file on the server filesystem. The file content is returned verbatim in the API response. This vulnerability is fixed in 4.3.

References (1)

Core 1

Core References

X_Refsource_Confirm x_refsource_confirm

https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-mfgg-vvc6-vqq7

Scores

CVSS v3 5.3

EPSS 0.0026

EPSS Percentile 17.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-22

Status published

Products (2)

oobabooga/text-generation-webui < 4.3

oobabooga/text_generation_web_ui < 4.3

Published Apr 07, 2026

Tracked Since Apr 07, 2026