Unauthenticated oobabooga text-generation-webui API access

Ankit Mehta@Secvyn

•updated 22 days ago•0•0•1

This rule detects unauthorized and potentially unauthenticated POST requests directed at the completion API endpoints (/api/v1/generate and /run/textgen) of the Oobabooga text-generation-webui, which is commonly used to host Large Language Models (LLMs). Such access, if not secured, could allow an external actor to interact with the model or potentially exploit the underlying infrastructure.