text-generation-webui hat eine Path Traversal in load_grammar() — beliebiger Dateilesen ohne Authentifizierung

The impact of this vulnerability is significant due to its unauthenticated nature and the potential for widespread data exposure. An attacker can exploit this flaw by crafting malicious API requests that include directory traversal payloads (e.g., ../../../etc/passwd). Successful exploitation allows the attacker to read any file accessible to the web server process, including sensitive configuration files, private keys, and potentially even source code. This could lead to further compromise of the system and its data. The lack of server-side validation of dropdown values in Gradio makes this attack straightforward to execute.

Organizations and individuals deploying text-generation-webui, particularly those running older versions (prior to 4.3.0) in production environments, are at risk. Shared hosting environments where multiple users share the same server are also particularly vulnerable, as an attacker could potentially exploit this vulnerability to access files belonging to other users.

• python / server:

import os
import requests

# Check for vulnerable versions
version_url = 'http://localhost:7860/api/version'
response = requests.get(version_url)
version = response.json().get('version', 'unknown')
if version and float(version.split('.')[0]) < 4:
    print('Vulnerable version detected!')

# Attempt path traversal
url = 'http://localhost:7860/api/file/../../../../etc/passwd'
response = requests.get(url)
if 'root:x:' in response.text:
    print('Path traversal detected!')

1. 2026-04-07Disclosure

   disclosure

1. Reserviert2026-04-02
2. Veröffentlicht2026-04-07
3. EPSS aktualisiert2026-04-15

The primary mitigation for CVE-2026-35485 is to upgrade text-generation-webui to version 4.3.0 or later. If upgrading is not immediately feasible, consider implementing a Web Application Firewall (WAF) or proxy to filter out requests containing directory traversal sequences (e.g., '../'). Restrict file access permissions for the web server user to minimize the potential impact of a successful attack. Regularly review and audit the text-generation-webui configuration to ensure it adheres to security best practices. After upgrading, confirm the fix by attempting to access a sensitive file via the API – the request should be rejected.