Lucene search
+L

149 matches found

OSV
OSV
added 2025/11/06 8:12 p.m.6 views

CVE-2025-12487 oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...

9.8CVSS7.7AI score0.00847EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/11/06 8:11 p.m.17 views

CVE-2025-12488 oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...

9.8CVSS0.00847EPSS
SaveExploits0References2
OSV
OSV
added 2025/11/06 8:11 p.m.5 views

CVE-2025-12488 oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...

9.8CVSS7.7AI score0.00847EPSS
SaveExploits0References4
CVE
CVE
added 2025/11/06 8:11 p.m.20 views

CVE-2025-12488

The CVE-2025-12488 issue affects oobabooga text-generation-webui. The vulnerability is caused by improper validation of the trust_remote_code argument in the /load endpoint, allowing an attacker to load a model with untrusted input and execute arbitrary code in the service account context. Auth i...

9.8CVSS7.5AI score0.00847EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.6 views

Text Generation Web UI 安全漏洞

Text Generation Web UI is a UI interface for native AI by oobabooga individual developers. A security vulnerability exists in Text Generation Web UI that stems from improper handling of the trustremotecode parameter, which could lead to remote code execution...

9.8CVSS9.5AI score0.00847EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/06 12:0 a.m.5 views

Text Generation Web UI 安全漏洞

Text Generation Web UI is a UI interface for native AI by oobabooga individual developers. A security vulnerability exists in Text Generation Web UI that stems from improper handling of the trustremotecode parameter in the load endpoint, which could lead to remote code execution...

9.8CVSS9.5AI score0.00847EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/10/30 12:0 a.m.5 views

PT-2025-44565

Name of the Vulnerable Software and Affected Versions oobabooga text-generation-webui version 2.5 Description The software contains a remote code execution issue stemming from reliance on untrusted inputs. This allows attackers to execute arbitrary code on affected systems without authentication...

9.8CVSS8.2AI score0.00847EPSS
SaveExploits0References7
Zero Day Initiative
Zero Day Initiative
added 2025/10/30 12:0 a.m.8 views

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the trustremotecode parameter provided to the load...

9.8CVSS7.6AI score0.00847EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2025/10/30 12:0 a.m.11 views

oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the trustremotecode parameter provided to the join...

9.8CVSS7.6AI score0.00847EPSS
SaveExploits0References1
Rows per page
Query Builder