Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Vendor: AUTOMATIC1111 Clear all filters
TI-2026-56753 CVE-2026-82288 · GHSA-75pm-v38f-v69m

Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags

Priority HIGH 77

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio_auth and api_auth values in cleartext.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00414 Published 2026-08-28 No fix listed CWE-522
TI-2024-11201 CVE-2024-12074 · GHSA-r49j-4jpw-x35c

Denial of Service in automatic1111/stable-diffusion-webui

Priority MEDIUM 62

A Denial of Service (DoS) vulnerability was discovered in the file upload feature of automatic1111/stable-diffusion-webui version 1.10.0.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00836 Published 2025-03-20 No fix listed CWE-400
TI-2024-10233 CVE-2024-11045 · GHSA-6vmm-pmxf-9784

Cross-Site WebSocket Hijacking (CSWSH) in automatic1111/stable-diffusion-webui

Priority HIGH 76

A Cross-Site WebSocket Hijacking (CSWSH) vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows an attacker to clone a malicious server extension from a GitHub repository.

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.00413 Published 2025-03-20 No fix listed CWE-284
TI-2024-11481 CVE-2024-12375 · GHSA-q73m-3cg7-m23w

Local File Inclusion in automatic1111/stable-diffusion-webui

Priority MEDIUM 62

A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00856 Published 2025-03-20 No fix listed CWE-36
TI-2024-10232 CVE-2024-11044 · GHSA-96w2-hg6w-6xv2

Open Redirect in automatic1111/stable-diffusion-webui

Priority MEDIUM 60

An open redirect vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00845 Published 2025-03-20 No fix listed CWE-601
TI-2024-11480 CVE-2024-12374 · GHSA-f3v2-jc5f-6328

Stored XSS in automatic1111/stable-diffusion-webui

Priority MEDIUM 60

A stored cross-site scripting (XSS) vulnerability exists in automatic1111/stable-diffusion-webui version git 82a973c.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00426 Published 2025-03-20 No fix listed CWE-79