CVE-2025-12487 oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...

CVE-2025-12488 oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...

CVE-2025-12488 oobabooga text-generation-webui trust_remote_code Reliance on Untrusted Inputs Remote Code Execution Vulnerability

oobabooga text-generation-webui trustremotecode Reliance on Untrusted Inputs Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of oobabooga text-generation-webui. Authentication is not required to exploit this...

CVE-2025-12488

The CVE-2025-12488 issue affects oobabooga text-generation-webui. The vulnerability is caused by improper validation of the trust_remote_code argument in the /load endpoint, allowing an attacker to load a model with untrusted input and execute arbitrary code in the service account context. Auth i...

CVE-2025-6176 vulnerabilities

Vulnerabilities for packages: mitmproxy...

CVE-2025-6176 vulnerabilities

Vulnerabilities for packages: mitmproxy, superset, nemo, pgadmin4...

GHSA-7F5H-V6XP-FCQ8 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, kserve, nemo, open-webui, airflow-core, mlflow, reflex, airflow...

PT-2025-44566

Name of the Vulnerable Software and Affected Versions oobabooga text-generation-webui versions prior to 2.5 Description The software is susceptible to a remote code execution issue stemming from insufficient validation of user-supplied input. Specifically, the trust remote code parameter within t...

CVE-2025-62708 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

CVE-2025-62707 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-VR63-X8VC-M265 vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-JFX9-29X2-RV3J vulnerabilities

Vulnerabilities for packages: nemo, open-webui...

GHSA-VR63-X8VC-M265 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-62708 vulnerabilities

Vulnerabilities for packages: open-webui...

GHSA-JFX9-29X2-RV3J vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-62707 vulnerabilities

Vulnerabilities for packages: open-webui...

CVE-2025-4106 WatchGuard Firebox leftover debug code vulnerability

An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version-specific diagnostic package and executing a leftover diagnostic command...

Unspecified Vulnerability in HCL BigFix WebUI

HCL BigFix WebUI is a web based administration page of HCL India. A security vulnerability exists in HCL BigFix WebUI, which stems from an improper response to the HOST information in the HTTP header field, and can be exploited by an attacker to cause a host header poisoning attack...

CVE-2025-62364

text-generation-webui is an open-source web interface for running Large Language Models. In versions through 3.13, a Local File Inclusion vulnerability exists in the character picture upload feature. An attacker can upload a text file containing a symbolic link to an arbitrary file path. When the...

CVE-2025-62364

text-generation-webui is an open-source web interface for running Large Language Models. In versions through 3.13, a Local File Inclusion vulnerability exists in the character picture upload feature. An attacker can upload a text file containing a symbolic link to an arbitrary file path. When the...