All 6 CVE vulnerabilities found in stable-diffusion-webui, with AI-generated Chinese analysis, references, and POCs.
Vendor: AUTOMATIC1111
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-111987 | AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting CWE-79 | 4.3 | Medium | 2026-10-18 |
| CVE-2026-111986 | AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection CWE-94 | 6.3 | Medium | 2026-10-18 |
| CVE-2026-111985 | AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources CWE-770 | 4.3 | Medium | 2026-10-18 |
| CVE-2026-111984 | AUTOMATIC1111 stable-diffusion-webui Card Builder ui_extra_networks.py create_item_html cross site scripting CWE-79 | 4.3 | Medium | 2026-10-18 |
| CVE-2026-82288 | Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags CWE-522 | 7.5 | High | 2026-08-28 |
| CVE-2024-31462 | Limited file write in Stable-diffusion-webui - GHSL-2024-010 CWE-22 | 6.3 | Medium | 2024-04-12 |
All 6 known CVE vulnerabilities affecting stable-diffusion-webui with full Chinese analysis, references, and POCs where available.