Text Generation Web UI vulnerabilities

1 known vulnerability in Text Generation Web UI from Oobabooga. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  text-generation-webui: Server-Side Request Forgery

  CVE-2026-35486Apr 7, 2026Oobabooga

  text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user-supplied URLs via requests.get() with zero validation — no scheme check, no IP filtering, no hostnam