TE
Product
text-generation-webui
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 4Low 0
Watch
Add text-generation-webui to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-62364 | 6.2 | Oct 13 | text-generation-webui allows arbitrary file read via symbolic link upload Affected: <= 3.13 |
| CVE-2026-35487 | 5.3 | Apr 7 | text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication Affected: < 4.3 |
| CVE-2026-35484 | 5.3 | Apr 7 | text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authentication Affected: < 4.3 |
| CVE-2026-35483 | 5.3 | Apr 7 | text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authentication Affected: < 4.3 |
Showing 4