Read the docs
TI-2024-10233 Aliases CVE-2024-11045GHSA-6vmm-pmxf-9784

Cross-Site WebSocket Hijacking (CSWSH) in automatic1111/stable-diffusion-webui

Priority HIGH 76CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-284.

Summary

A Cross-Site WebSocket Hijacking (CSWSH) vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows an attacker to clone a malicious server extension from a GitHub repository. The vulnerability arises from the lack of proper validation on WebSocket connections at ws://127.0.0.1:7860/queue/join, enabling unauthorized actions on the server. This can lead to unauthorized cloning of server extensions, execution of malicious scripts, data exfiltration, and potential denial of service (DoS).

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00413 35th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AUTOMATIC1111automatic1111/stable-diffusion-webuiup to latest—No fix listedCNA
  • automatic1111/stable-diffusion-webui VendorAUTOMATIC1111 Affected up to latest Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:automatic1111:stable-diffusion-webui:1.10.0:*:*:*:*:*:*:*1.10.0VulnerableAUTOMATIC1111
  • cpe:2.3:a:automatic1111:stable-diffusion-webui:1.10.0:*:*:*:*:*:*:* Versions 1.10.0 Vulnerable ·AUTOMATIC1111

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-11045
  2. 2026-10-03 Alias added: GHSA-6vmm-pmxf-9784

References

Exploit 1

  • TI-2024-10136 Unauthenticated DoS via Multipart Boundary in automatic1111/stable-diffusion-webui CVSS 3.0HIGH 7.5
  • TI-2024-11481 Local File Inclusion in automatic1111/stable-diffusion-webui CVSS 3.0MEDIUM 6.5
  • TI-2024-11201 Denial of Service in automatic1111/stable-diffusion-webui CVSS 3.0MEDIUM 6.5
  • TI-2024-11480 Stored XSS in automatic1111/stable-diffusion-webui CVSS 3.1MEDIUM 6.1
  • TI-2024-10232 Open Redirect in automatic1111/stable-diffusion-webui CVSS 3.0MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences