CVE-2026-35487 - text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication

Back Back to CVE browser

MEDIUM

text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication

Published Apr 7, 2026

5.3

MEDIUM

CVSS 3.1

EPSS 0.39%

Description

text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_prompt() allows reading any .txt file on the server filesystem. The file content is returned verbatim in the API response. This vulnerability is fixed in 4.3.

Affected products

Vendor Oobabooga Product Text-Generation-Webui Default
unknown
Affected
- < 4.3

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Oobabooga	Text-Generation-Webui	unknown	Affected < 4.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-19672
Advisory
https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-mfgg-vvc6-vqq7
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-19672		Advisory
https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-mfgg-vvc6-vqq7		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner GitHub_M

Published Apr 7, 2026

Updated Apr 7, 2026

Reserved Apr 2, 2026

Link CVE-2026-35487

CISA Vulnrichment

Updated Apr 7, 2026

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2026-35487

Red Hat

No data

ENISA EUVD

Assigner GitHub_M

Published Apr 7, 2026

Updated Apr 7, 2026

Link EUVD-2026-19672

GitHub

No data