AUTOMATIC1111 — Vulnerabilities & Security Advisories 12

AUTOMATIC1111 is an open-source web interface for Stable Diffusion, primarily used for AI image generation. Historically, it has faced vulnerabilities including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation, often stemming from improper input validation and insecure default configurations. The software's complex architecture and frequent updates have introduced security gaps, with seven CVEs recorded to date. Notable incidents include RCE flaws through API endpoints and XSS vulnerabilities in parameter handling. Despite its popularity, the project has been criticized for inconsistent security practices, with some issues remaining unpatched for extended periods.