text-generation-webui is an open-source web interface for running Large Language Models.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 6, 2026 · NIST NVD

   Detected

   text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, this python file can be triggered to get executed from "Model" menu when requesting to download a new mode

2. Jun 17, 2026 · NIST NVD

   Updated

   text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, this python file can be triggered to get executed from "Model" menu when requesting to download a new mode

Affected

• cpe oobabooga/textgenversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-35050

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-35050

  text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overw

  nvd.nist.gov

References

• Exploit · github.com