text-generation-webui affected by Remote Code Execution (RCE) through Path Traversal at "Session -> Save extention settings to user_data/settings.yaml".

The primary impact of CVE-2026-35050 is the ability for an attacker to execute arbitrary code on the server hosting the text-generation-webui application. This is achieved by saving malicious extension settings in a '.py' format and overwriting critical files, such as 'download-model.py'. When a user attempts to download a new model, the attacker's code is triggered, granting them control over the server. The blast radius extends to any data processed or stored by the webui, including potentially sensitive user data or model configurations. Successful exploitation could lead to complete system compromise and data exfiltration.

Organizations and individuals using text-generation-webui for local LLM inference are at risk. This includes developers experimenting with LLMs, researchers, and hobbyists. Shared hosting environments where multiple users have write access to the webui installation are particularly vulnerable.

• linux / server: Monitor file system integrity using tools like AIDE or Tripwire for unauthorized modifications to files in the text-generation-webui root directory. Specifically, check for modifications to 'download-model.py'.

find /path/to/text-generation-webui -type f -mmin -60 -print0 | xargs -0 md5sum | grep -v 'expected_md5_hash'

• python: Monitor Python script execution using system monitoring tools. Look for unexpected or unauthorized script executions.

import psutil
for proc in psutil.process_iter(['pid', 'name', 'cmdline']):
    if 'python' in proc.info['name'].lower() and 'download-model.py' in ' '.join(proc.info['cmdline']):
        print(f'Suspicious Python process: PID={proc.info['pid']}, Command={proc.info['cmdline']}')

1. 2026-04-06Disclosure

   disclosure

1. Gereserveerd2026-03-31
2. Gepubliceerd2026-04-06
3. Gewijzigd2026-04-07
4. EPSS bijgewerkt2026-04-14

The primary mitigation for CVE-2026-35050 is to immediately upgrade text-generation-webui to version 4.1.1 or later. If upgrading is not immediately feasible, restrict write access to the application's root directory to prevent unauthorized file modifications. Consider implementing a Web Application Firewall (WAF) with rules to detect and block suspicious file uploads or modifications. Monitor system logs for unusual Python script executions or file modifications. After upgrading, confirm the fix by attempting to download a model and verifying that no unexpected code is executed.