Automatic1111 Stable-Diffusion-Webui
8 CVEs affecting Automatic1111 Stable-Diffusion-Webui. Latest disclosed: 2026-08-28. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-11045 | Critical | 9.6 | 2025-03-20 | A Cross-Site WebSocket Hijacking (CSWSH) vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows an attacker to clone a malicious server ex… |
CVE-2026-82288 | High | 7.5 | 2026-08-28 | Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line argum… |
CVE-2024-10935 | High | 7.5 | 2025-03-20 | automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server fails to handle excessive characters appended to the end of multi… |
CVE-2024-12375 | Medium | 6.5 | 2025-03-20 | A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c. This vulnerability allows an attack… |
CVE-2024-12074 | Medium | 6.5 | 2025-03-20 | A Denial of Service (DoS) vulnerability was discovered in the file upload feature of automatic1111/stable-diffusion-webui version 1.10.0. The vulnerability is… |
CVE-2024-31462 | Medium | 6.3 | 2024-04-12 | stable-diffusion-webui is a web interface for Stable Diffusion, implemented using Gradio library. Stable-diffusion-webui 1.7.0 is vulnerable to a limited file… |
CVE-2024-12374 | Medium | 6.1 | 2025-03-20 | A stored cross-site scripting (XSS) vulnerability exists in automatic1111/stable-diffusion-webui version git 82a973c. An attacker can upload an HTML file, whic… |
CVE-2024-11044 | Medium | 6.1 | 2025-03-20 | An open redirect vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows a remote unauthenticated attacker to redirect users to arbitrary w… |