Vulnerabilities

TI-2026-54194 CVE-2026-77815 · GHSA-cw66-pfp5-82xp

Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories

HIGH 77

to_abs_path in scripts/iib/tool.py normalised the requested path with os.path.normpath, which collapses dot segments but does not resolve symbolic links.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00505 Published 2026-08-21 No fix listed CWE-59

TI-2026-54193 CVE-2026-77814 · GHSA-6p87-gwpg-qp8w

Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator

HIGH 77

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00504 Published 2026-08-21 No fix listed CWE-22

TI-2023-24928 CVE-2023-46315 · GHSA-jq2h-j9qf-53rv

The zanllp sd-webui-infinite-image-browsing (aka Infinite Image Browsing) extension…

MEDIUM 40

The zanllp sd-webui-infinite-image-browsing (aka Infinite Image Browsing) extension before 977815a for stable-diffusion-webui (aka Stable Diffusion web UI), if Gradio authentication is enabled without secret key configur…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00759 Published 2023-10-22 No fix listed CWE-200

Vulnerabilities

Filters

Infinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories

Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator

The zanllp sd-webui-infinite-image-browsing (aka Infinite Image Browsing) extension…