CVE-2026-35483: text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.3, an unauthenticate

CVE-2026-35483 is a path traversal vulnerability (a flaw that lets attackers read files outside intended directories) in text-generation-webui, an open-source tool for running large language models. Versions before 4.3 allow unauthenticated attackers to read files with extensions like .jinja, .jinja2, .yaml, or .yml from anywhere on the server.