CVE-2026-35486

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-35486", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-02T20:49:44.454Z", "datePublished": "2026-04-07T14:49:37.805Z", "dateUpdated": "2026-04-09T14:37:31.599Z"}, "containers": {"cna": {"title": "text-generation-webui has a SSRF in superbooga/superboogav2 extensions \u2014 no URL validation", "problemTypes": [{"descriptions": [{"cweId": "CWE-918", "lang": "en", "description": "CWE-918: Server-Side Request Forgery (SSRF)", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2"}], "affected": [{"vendor": "oobabooga", "product": "text-generation-webui", "versions": [{"version": "< 4.3", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-07T14:49:37.805Z"}, "descriptions": [{"lang": "en", "value": "text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user-supplied URLs via requests.get() with zero validation \u2014 no scheme check, no IP filtering, no hostname allowlist. An attacker can access cloud metadata endpoints, steal IAM credentials, and probe internal services. The fetched content is exfiltrated through the RAG pipeline. This vulnerability is fixed in 4.3."}], "source": {"advisory": "GHSA-jvrj-w5hq-6cp2", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-09T14:37:28.632194Z", "id": "CVE-2026-35486", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-09T14:37:31.599Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-35486", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-09T14:37:28.632194Z"}}}], "references": [{"url": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-09T14:37:23.287Z"}}], "cna": {"title": "text-generation-webui has a SSRF in superbooga/superboogav2 extensions \u2014 no URL validation", "source": {"advisory": "GHSA-jvrj-w5hq-6cp2", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "oobabooga", "product": "text-generation-webui", "versions": [{"status": "affected", "version": "< 4.3"}]}], "references": [{"url": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2", "name": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user-supplied URLs via requests.get() with zero validation \u2014 no scheme check, no IP filtering, no hostname allowlist. An attacker can access cloud metadata endpoints, steal IAM credentials, and probe internal services. The fetched content is exfiltrated through the RAG pipeline. This vulnerability is fixed in 4.3."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-918", "description": "CWE-918: Server-Side Request Forgery (SSRF)"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-07T14:49:37.805Z"}}}, "cveMetadata": {"cveId": "CVE-2026-35486", "state": "PUBLISHED", "dateUpdated": "2026-04-09T14:37:31.599Z", "dateReserved": "2026-04-02T20:49:44.454Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-04-07T14:49:37.805Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "text-generation-webui", "vendor": "oobabooga", "versions": [{"status": "affected", "version": "< 4.3"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:oobabooga:text_generation_web_ui:*:*:*:*:*:*:*:*", "matchCriteriaId": "7B0114B9-7FD7-45A2-9103-936373FF3445", "versionEndExcluding": "4.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, he superbooga and superboogav2 RAG extensions fetch user-supplied URLs via requests.get() with zero validation \u2014 no scheme check, no IP filtering, no hostname allowlist. An attacker can access cloud metadata endpoints, steal IAM credentials, and probe internal services. The fetched content is exfiltrated through the RAG pipeline. This vulnerability is fixed in 4.3."}, {"lang": "es", "value": "text-generation-webui es una interfaz web de c\u00f3digo abierto para ejecutar Modelos de Lenguaje Grandes. Antes de la versi\u00f3n 4.3, las extensiones RAG superbooga y superboogav2 recuperan URLs proporcionadas por el usuario a trav\u00e9s de requests.get() sin ninguna validaci\u00f3n - sin verificaci\u00f3n de esquema, sin filtrado de IP, sin lista blanca de nombres de host. Un atacante puede acceder a puntos finales de metadatos en la nube, robar credenciales de IAM y sondear servicios internos. El contenido recuperado es exfiltrado a trav\u00e9s del pipeline RAG. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 4.3."}], "id": "CVE-2026-35486", "lastModified": "2026-10-26T21:10:00.170", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35486", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-04-09T14:37:28.632194Z", "version": "2.0.3"}}]}, "published": "2026-04-07T16:16:26.700", "references": [{"source": "security-advisories@github.com", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Exploit", "Vendor Advisory"], "url": "https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-jvrj-w5hq-6cp2"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-918"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,4.3)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "text-generation-webui", "source": "cna", "vendor": "oobabooga"}, "product": "text-generation-webui", "vendor": "oobabooga"}], "analysis": {"en": {"generated_at": "2026-04-09T21:08:58.315407+00:00", "value": {"mitigation_remediation": ["Upgrade text\u2011generation\u2011webui to version 4.3 or later where the issue is fixed. ", "If upgrading immediately is not feasible, restrict outbound traffic from the application to prevent connections to internal IP ranges and the metadata service address 169.254.169.254, either by firewall rules or network segmentation. ", "Disable or remove the superbooga and superboogav2 extensions until the patch is applied. ", "As a temporary measure, implement custom URL validation in the application or within the requests library to enforce whitelist rules and reject non\u2011HTTPS schemes."], "summary": {"action": "Patch Now", "impact": "Credential theft and internal network compromise via SSRF"}, "threat_synthesis": {"affected_systems": "Affected systems include all installations of the open\u2011source text\u2011generation\u2011webui application using any version before 4.3, particularly when the superbooga or superboogav2 extensions are enabled. The primary vendor is oobabooga. No explicit version range is given beyond \"prior to 4.3\"; therefore any version below this release is considered vulnerable.", "description_and_impact": "The vulnerability resides in the superbooga and superboogav2 RAG extensions of the text-generation-webui application, where user-supplied URLs are fetched using requests.get without any validation of scheme, IP addresses, or hostname allowlist. This lack of validation permits serverside request forgery, enabling an attacker to request internal or cloud metadata endpoints, exfiltrate the retrieved content, and potentially capture IAM credentials. The flaw constitutes a high\u2011impact data exfiltration vector and is classified as CWE\u2011918.", "risk_and_exploitability": "The CVSS score of 7.5 indicates high severity, while an EPSS score of less than 1 percent suggests low observed exploitation probability to date. The vulnerability is not currently listed in the CISA KEV catalog. The likely attack vector is an unauthenticated or lightly authenticated web UI request that supplies a malicious URL to the RAG extension. Because the application makes outbound HTTP calls without validation, an attacker controlling the URL can trigger the SSRF, provided the web interface is publicly reachable and does not enforce strict access controls."}}}}, "created": "2026-04-08T19:37:21.357375+00:00", "updated": "2026-04-10T09:41:32.282318+00:00", "vendors": ["oobabooga", "oobabooga$PRODUCT$text-generation-webui"]}