v4.6.2

Oobabooga's TextGen WebUI, a popular open-source text generation interface, has released version 4.6.2 with several notable features and security improvements. The update introduces a tool call confirmation system, adding inline approve/reject/always-approve buttons that appear before each tool call is executed. This feature is enabled via a new "Confirm tool calls" checkbox in the Chat tab, giving users more control over AI actions.

Additionally, v4.6.2 adds Stdio MCP server support, allowing users to configure local subprocess-based MCP servers via user_data/mcp.json, using the same format as Claude Desktop and Cursor. The update also includes a new preserve_thinking chat template parameter with a UI checkbox and --preserve-thinking CLI flag to control whether thinking blocks from prior turns are kept in context. The sidebars have been overhauled to toggle independently and persist state on page refresh. Security fixes address SSRF vulnerabilities in URL fetching by adding backslash and userinfo rejection and validating every redirect hop. Bug fixes include fixes for Gemma 4 thinking tags not hidden after tool calls and GPT-OSS channel tokens leaking in UI. Dependencies have been updated, including llama.cpp and ExLlamaV3.