Vendors / AUTOMATIC1111 Records 12 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now AUTOMATIC1111 records in CISA KEV No AUTOMATIC1111 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 77
Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio_auth and api_auth values in cleartext.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00414 · Published 2026-08-28 · No fix listed CWE-522
Priority HIGH 76
A Cross-Site WebSocket Hijacking (CSWSH) vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows an attacker to clone a malicious server extension from a GitHub repository.
CVSS 3.0 CRITICAL 9.6· Network · No auth · User interaction · EPSS 0.00413 · Published 2025-03-20 · No fix listed CWE-284
Priority HIGH 72
automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server fails to handle excessive characters appended to the end of multipart boundaries.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00835 · Published 2025-03-20 · No fix listed CWE-770
Priority MEDIUM 63
A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00358 · Published 2026-10-18 · No fix listed CWE-79
Priority MEDIUM 62
A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00856 · Published 2025-03-20 · No fix listed CWE-36
Priority MEDIUM 62
A Denial of Service (DoS) vulnerability was discovered in the file upload feature of automatic1111/stable-diffusion-webui version 1.10.0.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00836 · Published 2025-03-20 · No fix listed CWE-400
Priority MEDIUM 60
A stored cross-site scripting (XSS) vulnerability exists in automatic1111/stable-diffusion-webui version git 82a973c.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00426 · Published 2025-03-20 · No fix listed CWE-79
Priority MEDIUM 60
An open redirect vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00845 · Published 2025-03-20 · No fix listed CWE-601
Priority MEDIUM 57
A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00353 · Published 2026-10-18 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00306 · Published 2026-10-18 · No fix listed CWE-74
Priority MEDIUM 57
A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1.
CVSS 4.0 MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00425 · Published 2026-10-18 · No fix listed CWE-400
Priority LOW 29
stable-diffusion-webui is a web interface for Stable Diffusion, implemented using Gradio library.
CVSS 3.1 MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.0068 · Published 2024-04-12 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
1 2 9 0 0
THREATIST.IORead the docs