The vulnerability in text-generation-webui (before version 4.3) is an improper limitation of a pathname to a restricted directory (CWE-22). An attacker can exploit this by sending a POST request with directory traversal sequences (e.g., ../../../etc/passwd) to the API, which then reads and returns the contents of arbitrary files on the server. This occurs because the load_grammar() function lacks proper validation and Gradio does not enforce server-side validation of dropdown values. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity, with network attack vector, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. The issue is resolved in version 4.3 of the software.

An unauthenticated attacker can read any file on the server filesystem without restriction, potentially exposing sensitive information such as configuration files, credentials, or other private data. There is no impact on integrity or availability reported. This can lead to significant confidentiality breaches.

This vulnerability is fixed in text-generation-webui version 4.3. Users should upgrade to version 4.3 or later to remediate this issue. Since no official patch link or advisory is provided, users should verify the upgrade from the vendor's official source. Until upgraded, restrict access to the vulnerable API to trusted users or networks as a temporary mitigation.