CVE-2026-35487CWE-22

text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication

Medium · published April 7, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
31.7
In the wild
Unconfirmed
What it is

text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticated path traversal vulnerability in load_prompt() allows reading any .txt file on the server filesystem. The file content is returned verbatim in the API response. This vulnerability is fixed in 4.3.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00388 · 31.7th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-04-07T14:50Z
EPSS history
Timeline
  • 07 APR 14:50Z
    text-generation-webui has a Path Traversal in load_prompt() — .txt file read without authentication
    cvelistv5