CVE-2026-35050: text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4.1.1, users can save

text-generation-webui is an open-source web interface for running Large Language Models (AI systems that generate text). Before version 4.1.1, the application allowed users to save extension settings as Python files (code files that run on servers) in the main app directory, which could let attackers overwrite important Python files like 'download-model.py' and execute malicious code when users tried to download a new model.