The vulnerability in oobabooga text-generation-webui (versions before 4.3) involves improper limitation of pathname to a restricted directory (CWE-22). The load_template() function does not properly restrict file access, enabling unauthenticated users to perform path traversal attacks. This allows reading sensitive template and configuration files (.jinja, .jinja2, .yaml, .yml) from the server filesystem. The vulnerability has a CVSS 3.1 base score of 5.3 (medium severity) with network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality only. The issue is resolved in version 4.3.

An unauthenticated attacker can read arbitrary files with specific extensions on the server hosting the vulnerable text-generation-webui, potentially exposing sensitive template or configuration data. There is no impact on integrity or availability reported. No known exploits in the wild have been documented.

Upgrade to version 4.3 or later of oobabooga text-generation-webui where this vulnerability is fixed. Since the vulnerability is resolved in this version, applying the official update is the recommended remediation. Patch status is not explicitly stated beyond the fix in 4.3, so verify with vendor sources for the latest guidance.