CVE-2026-35483 text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication

Medium 5.3 Published 7 Apr 2026 Updated 7 Apr 2026

Unauthenticated attackers can read arbitrary .jinja, .yaml, or .yml files from the server filesystem via path traversal in text-generation-webui.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-35483?

CVE-2026-35483 is a medium-severity path traversal vulnerability in oobabooga text-generation-webui, published on 7 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_template() allows reading files with .jinja, .jinja2, .yaml, or .yml extensions from anywhere on the server filesystem. For .jinja files the content is returned verbatim; for .yaml files a parsed key is extracted. This vulnerability is fixed in 4.3.

Weakness: CWE-22

Which versions are affected by CVE-2026-35483?

It affects 1 product.

Products include Oobabooga Textgen.

How do I fix CVE-2026-35483?

No fix has been published for CVE-2026-35483 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2026-35483 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-35483 exists.

Sources

Also known as GHSA-85fx-vw25-4c95.