CVE-2026-35050 oobabooga CVE debrief

Who should care

Defenders responsible for the text-generation-webui application, particularly those with write access to the app's root directory, should be aware of this vulnerability and take steps to mitigate it.

Why it matters

This vulnerability allows users to overwrite Python files, potentially leading to arbitrary code execution and elevation of privileges. Defenders should prioritize upgrading to version 4.1.1 or later and restrict write access to the app's root directory.

• Arbitrary Python file execution
• Potential for code injection and execution
• Elevation of privileges through model download

Technical summary

The text-generation-webui application, prior to version 4.1.1, allows users to save extension settings in 'py' format in the app's root directory. This can lead to overwriting of Python files, such as 'download-model.py', which can then be executed from the 'Model' menu when downloading a new model. The vulnerability is exploitable by users with write access to the app's root directory, potentially leading to arbitrary code execution and elevation of privileges. The fix involves upgrading to version 4.1.1 or later and restricting write access to the app's root directory.

Defensive priority

Defenders should prioritize upgrading to version 4.1.1 or later and restrict write access to the app's root directory.

Recommended defensive actions

• Upgrade to version 4.1.1 or later
• Restrict write access to the app's root directory
• Monitor for suspicious activity in the 'Model' menu
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The vulnerability is described in the CVE record and the NVD vulnerability detail page. The fix is mentioned in the CVE record and the source reference from GitHub. The CVE record was published on 2026-04-06T18:16:42.583Z and has not been modified since then. Additional verification is recommended to confirm affected scope and severity. Review official advisories and track exceptions for retesting remediated assets.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.