CVE-2025-62364 text-generation-webui allows arbitrary file read via symbolic link upload
An unauthenticated attacker can read arbitrary server files by uploading a symbolic link, exposing sensitive data like credentials and configurations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-62364?
CVE-2025-62364 is a medium-severity path traversal vulnerability in oobabooga text-generation-webui, published on 13 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
text-generation-webui is an open-source web interface for running Large Language Models. In versions through 3.13, a Local File Inclusion vulnerability exists in the character picture upload feature. An attacker can upload a text file containing a symbolic link to an arbitrary file path. When the application processes the upload, it follows the symbolic link and serves the contents of the targeted file through the web interface. This allows an unauthenticated attacker to read sensitive files on the server, potentially exposing system configurations, credentials, and other confidential information. This vulnerability is fixed in 3.14. No known workarounds exist.
Weakness: CWE-59
Which versions are affected by CVE-2025-62364?
How do I fix CVE-2025-62364?
No fix has been published for CVE-2025-62364 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-62364 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-62364 exists.
Sources
Also known as GHSA-66rw-q8w5-c2hg.