CVE-2026-35050

creationtimestamp| type| source ---|---|--- 2026-04-06 18:26:44+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitvbjt7fo2h 2026-04-06 18:27:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mitvc7safa2s 2026-04-06 19:15:37+00:00| seen|...

CVE-2026-35050

CVE-2026-35050 affects text-generation-webui prior to 4.1.1. An attacker can abuse the ability to save extension settings in the app root (py format) to overwrite Python files such as download-model.py. The overwritten file can be triggered via the Model menu when requesting to download a new mod...