SB2026042410 - Multiple vulnerabilities in Text Generation Web UI

Description

This security bulletin contains information about 2 vulnerabilities.

1) Improper access control (CVE-ID: N/A)

CWE-ID: CWE-284 - Improper Access Control

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to improper access control in the trust_remote_code check for the transformers loader when handling HTTP POST requests to /queue/join that load a model. A remote attacker can send a specially crafted request to execute arbitrary code.

The issue arises because enforcement of the trust_remote_code restriction is performed only in the client-side web interface.

2) Inclusion of Functionality from Untrusted Control Sphere (CVE-ID: N/A)

CWE-ID: CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber

The vulnerability allows a remote attacker to execute arbitrary code.

The vulnerability exists due to reliance on untrusted inputs in the transformers loader trust_remote_code handling when processing crafted HTTP POST requests to /queue/join that load a model. A remote attacker can send a specially crafted request to execute arbitrary code.

The trust_remote_code restriction is enforced only in the client-side web interface, and exploitation does not require the server to be started with the corresponding command-line option.

Remediation

Install update from vendor's website.

References

• https://github.com/oobabooga/text-generation-webui/security/advisories/GHSA-6j2r-r6xw-423x
• https://github.com/advisories/GHSA-6j2r-r6xw-423x
• https://github.com/oobabooga/textgen/security/advisories/GHSA-6j2r-r6xw-423x