CVE-2026-35050 Path traversal in text-generation-webui
Attackers can overwrite Python files via path traversal in settings saving, leading to remote code execution when triggering model downloads.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-35050?
CVE-2026-35050 is a critical path traversal vulnerability in oobabooga text-generation-webui, published on 6 Apr 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, this python file can be triggered to get executed from "Model" menu when requesting to download a new model. This vulnerability is fixed in 4.1.1.
Weakness: CWE-22
Which versions are affected by CVE-2026-35050?
It affects 1 product.
Products include Oobabooga Textgen.
How do I fix CVE-2026-35050?
No fix has been published for CVE-2026-35050 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-35050 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-35050 exists.
Other vulnerabilities in oobabooga text-generation-webui
- CVE-2026-35485 text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication
- CVE-2026-35483 text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication
- CVE-2026-35484 text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication
Sources
Also known as GHSA-jg96-p5p6-q3cv.