oobabooga — Vulnerabilities & Security Advisories 9

Oobabooga is an open-source web interface for running Large Language Models locally, primarily used for AI experimentation and development. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues across its nine recorded CVEs. The application's security posture has been compromised through insecure deserialization and improper input validation, allowing attackers to execute arbitrary code or access sensitive data. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities in web management interfaces suggests potential risks for users deploying the tool without proper hardening or network isolation.