What is the CVSS score of CVE-2026-35050?

CVE-2026-35050 has a CVSS 3.1 base score of 9.1 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Python are affected by CVE-2026-35050?

CVE-2026-35050 affects text-generation-webui versions before 4.1.1, allowing authenticated administrators to execute arbitrary code by overwriting Python application files through malicious extension…. A patch is available.

How to fix or mitigate CVE-2026-35050?

Within 24 hours: Identify all instances of text-generation-webui in production and staging environments and document current versions. Within 7 days: Upgrade all affected deployments to text-generation-webui version 4.1.1 or later; if immediate upgrade is impossible, restrict administrative access to text-generation-webui interfaces to trusted personnel only. Within 30 days: Conduct access reviews to ensure administrative roles follow least-privilege principles and implement network segmentation to limit blast radius of compromised text-generation-webui instances.

Python CVE-2026-35050

EUVD-2026-19408 CRITICAL

Path Traversal (CWE-22)

2026-04-06 security-advisories@github.com

Python Path Traversal

9.1

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.1 CRITICAL

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Re-analysis Queued

Apr 22, 2026 - 19:37 vuln.today

cvss_changed

Analysis Updated

Apr 16, 2026 - 05:46 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

4.1.1

EUVD ID Assigned

Apr 06, 2026 - 18:22 euvd

EUVD-2026-19408

Analysis Generated

Apr 06, 2026 - 18:22 vuln.today

CVE Published

Apr 06, 2026 - 18:16 nvd

CRITICAL 9.1

DescriptionGitHub Advisory

text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, this python file can be triggered to get executed from "Model" menu when requesting to download a new model. This vulnerability is fixed in 4.1.1.

AnalysisAI

Arbitrary Python file overwrite in text-generation-webui versions prior to 4.1.1 enables authenticated high-privilege users to achieve remote code execution by overwriting critical application files like download-model.py through malicious extension settings saved in .py format, then triggering execution via the Model download interface. No public exploit identified at time of analysis, though EPSS data not available for this recent CVE and exploitation methodology is straightforward for authenticated attackers.

Technical ContextAI

Text-generation-webui is an open-source web interface for running Large Language Models locally. The vulnerability stems from improper path validation (CWE-22: Path Traversal) when users save extension settings in Python format. The application fails to restrict the destination directory for these .py files, allowing write operations to the application root directory. This enables overwriting legitimate Python modules that are subsequently imported and executed by the application runtime. The attack leverages Python's dynamic module loading behavior - when the application imports a module like download-model.py for legitimate functionality, it executes the attacker-controlled code instead. The CVSS vector indicates network accessibility (AV:N), low attack complexity (AC:L), but requires high privileges (PR:H), suggesting the attacker must have administrative or similar elevated access to the web interface to access extension settings functionality.

RemediationAI

Upgrade text-generation-webui to version 4.1.1 or later, which implements proper path validation to prevent extension settings from overwriting files outside designated directories. The fix can be obtained from the official GitHub repository at oobabooga/text-generation-webui. Organizations should prioritize patching instances exposed to multiple authenticated users or running in shared environments. As an interim mitigation for environments where immediate patching is not feasible, restrict access to extension settings functionality to only fully trusted administrators, implement file integrity monitoring on critical Python files in the application root directory, and run the application with minimal system privileges using a dedicated service account to limit post-exploitation impact. Review user accounts with high privileges and audit recent extension setting changes for signs of exploitation. Full security advisory details are available at https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jg96-p5p6-q3cv.