Vulnerability in Invoke-Ai Invoke-Ai/invokeai
CVE-2025-6237
A vulnerability in invokeai version v6.0.0a1 and below allows attackers to perform path traversal and arbitrary file deletion via the GET /api/v1/images/download/{bulk_download_item_name} endpoint. By manipulating the filename arguments, attackers can read and delete any files on the server, including critical system files such as SSH keys, databases, and configuration files. This vulnerability results in high confidentiality, integrity, and availability impacts.
EPSS: 0.004 (27.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Invoke-ai Invoke-ai/invokeai — versions unspecified
Weakness classification (CWE)
Public proof-of-concept exploits
References
Frequently asked questions
- What is CVE-2025-6237?
- CVE-2025-6237 is a critical-severity vulnerability in Invoke-Ai Invoke-Ai/invokeai, classified under External Control of File Name or Path. CVSS score: 9.8/10. Published 2025-09-18.
- How severe is CVE-2025-6237?
- Critical severity. CVSS v3 base score is 9.8 out of 10.
- Is CVE-2025-6237 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.