agentprime: oobabooga-text-generation-webuiEvery new CVE for oobabooga-text-generation-webui.https://agentprime.io/CVE-2026-35487: text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authenticationhttps://agentprime.io/advisories/CVE-2026-35487/https://agentprime.io/advisories/CVE-2026-35487/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 14:50:25 GMTCVECVE-2026-35486: text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validationhttps://agentprime.io/advisories/CVE-2026-35486/https://agentprime.io/advisories/CVE-2026-35486/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 14:49:37 GMTCVECVE-2026-35485: text-generation-webui has a Path Traversal in load_grammar() — arbitrary file read without authenticationhttps://agentprime.io/advisories/CVE-2026-35485/https://agentprime.io/advisories/CVE-2026-35485/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 14:47:37 GMTCVECVE-2026-35484: text-generation-webui has a Path Traversal in load_preset() — .yaml file read without authenticationhttps://agentprime.io/advisories/CVE-2026-35484/https://agentprime.io/advisories/CVE-2026-35484/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 14:46:42 GMTCVECVE-2026-35483: text-generation-webui has a Path Traversal in load_template() — .jinja/.yaml/.yml file read without authenticationhttps://agentprime.io/advisories/CVE-2026-35483/https://agentprime.io/advisories/CVE-2026-35483/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Apr 2026 14:45:07 GMTCVECVE-2026-35050: text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml".https://agentprime.io/advisories/CVE-2026-35050/https://agentprime.io/advisories/CVE-2026-35050/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 06 Apr 2026 17:30:20 GMTCVEcriticalCVE-2025-12487: oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-12487/https://agentprime.io/advisories/CVE-2025-12487/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Nov 2025 20:12:07 GMTCVEcriticalCVE-2025-12488: oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-12488/https://agentprime.io/advisories/CVE-2025-12488/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Nov 2025 20:11:52 GMTCVEcriticalCVE-2025-62364: text-generation-webui allows arbitrary file read via symbolic link uploadhttps://agentprime.io/advisories/CVE-2025-62364/https://agentprime.io/advisories/CVE-2025-62364/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Oct 2025 20:30:56 GMTCVE