oobabooga vulnerabilities
9 published CVEs name oobabooga among the affected products.
- 9Published CVEs9 of them scored
- 6Last 12 monthspublished in the last year
- 3Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-35487
text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication
oobabooga · text-generation-webui
Medium5.3 - CVE-2026-35486
text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation
oobabooga · text-generation-webui
High7.5 - CVE-2026-35485
text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authentication
oobabooga · text-generation-webui
High7.5 - CVE-2026-35484
text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication
oobabooga · text-generation-webui
Medium5.3 - CVE-2026-35483
text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication
oobabooga · text-generation-webui
Medium5.3 - CVE-2026-35050
text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml".
oobabooga · text-generation-webui
Critical9.1 - CVE-2025-12487
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
oobabooga · text-generation-webui
Critical9.8 - CVE-2025-12488
oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability
oobabooga · text-generation-webui
Critical9.8 - CVE-2025-62364
text-generation-webui allows arbitrary file read via symbolic link upload
oobabooga · text-generation-webui
Medium6.2