CVE-2026-35485 text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication

High 7.5 Published 7 Apr 2026 Updated 7 Apr 2026

Unauthenticated attackers can read arbitrary files on the server via path traversal in the load_grammar function of text-generation-webui.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-35485?

CVE-2026-35485 is a high-severity path traversal vulnerability in oobabooga text-generation-webui, published on 7 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_grammar() allows reading any file on the server filesystem with no extension restriction. Gradio does not server-side validate dropdown values, so an attacker can POST directory traversal payloads (e.g., ../../../etc/passwd) via the API and receive the full file contents in the response. This vulnerability is fixed in 4.3.

Weakness: CWE-22

Which versions are affected by CVE-2026-35485?

It affects 1 product.

Products include Oobabooga Textgen.

How do I fix CVE-2026-35485?

No fix has been published for CVE-2026-35485 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2026-35485 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-35485 exists.

Sources

Also known as GHSA-hqg5-487v-5mc6.