Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user-supplied URLs via requests.get() with zero validation — no scheme check, no IP filtering, no hostname allowlist. An attacker can access cloud metadata endpoints, steal IAM credentials, and probe internal services. The fetched content is exfiltrated through the RAG pipeline. This vulnerability is fixed in 4.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-35486 Server-Side Request Forgery in text-generation-webui RAG Extensions Prior to 4.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35486
Post summary
The message discloses an SSRF vulnerability in text-generation-webui RAG extensions affecting versions prior to 4.3.
CVE-2026-35486 text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user-suppli… https://www.cve.org/CVERecord?id=CVE-2026-35486
Post summary
The post links to the CVE record for CVE‑2026‑35486, noting that earlier versions of certain extensions fetch user‑supplied data, but it provides no PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | oobabooga | text_generation_web_ui | - | - | - |