Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the app root directory. This allows to overwrite python files, for instance the "download-model.py" file could be overwritten. Then, this python file can be triggered to get executed from "Model" menu when requesting to download a new model. This vulnerability is fixed in 4.1.1.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
[CVE-2026-35050: CRITICAL] Attention all users of text-generation-webui! A critical security vulnerability allowing overwrite of Python files has been patched in version 4.1.1. Update now to stay secure.#cve,CVE-2026-35050,#cybersecurity https://cvefind.com/CVE-2026-35050
Post summary
The post alerts users to a critical file‑overwrite vulnerability in text-generation-webui and urges them to upgrade to the patched 4.1.1 version.
CVE-2026-35050 text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save extention settings in "py" format and in the a… https://www.cve.org/CVERecord?id=CVE-2026-35050
Post summary
The text merely references CVE-2026-35050 without providing actionable, technical, or exploit-related details.
🚨 CVE-2026-35050: text-generation-webui affected b... Path traversal lets attackers overwrite Python files like http://download-model.py, then trigger execution via Model menu - cl... https://zerodaysignal.com/vulnerability/CVE-2026-35050 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet announces a path‑traversal vulnerability (CVE-2026-35050) in text-generation-webui that permits overwriting Python files and executing code via the Model menu.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oobabooga | textgen | - | - | - |