automatic1111 vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20256
3. 20265

Newest CVEs

• CVE-2026-111987

  AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting

  AUTOMATIC1111 · stable-diffusion-webui

  Medium5.3
• CVE-2026-111986

  AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection

  AUTOMATIC1111 · stable-diffusion-webui

  Medium5.3
• CVE-2026-111985

  AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources

  AUTOMATIC1111 · stable-diffusion-webui

  Medium5.3
• CVE-2026-111984

  AUTOMATIC1111 stable-diffusion-webui Card Builder ui_extra_networks.py create_item_html cross site scripting

  AUTOMATIC1111 · stable-diffusion-webui

  Medium5.3
• CVE-2026-82288

  Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags

  AUTOMATIC1111 · stable-diffusion-webui

  High8.7
• CVE-2024-12074

  Denial of Service in automatic1111/stable-diffusion-webui

  automatic1111 · automatic1111/stable-diffusion-webui

  Medium6.5
• CVE-2024-11045

  Cross-Site WebSocket Hijacking (CSWSH) in automatic1111/stable-diffusion-webui

  automatic1111 · automatic1111/stable-diffusion-webui

  Critical9.6
• CVE-2024-12375

  Local File Inclusion in automatic1111/stable-diffusion-webui

  automatic1111 · automatic1111/stable-diffusion-webui

  Medium6.5
• CVE-2024-10935

  Unauthenticated DoS via Multipart Boundary in automatic1111/stable-diffusion-webui

  automatic1111 · automatic1111/stable-diffusion-webui

  High7.5
• CVE-2024-11044

  Open Redirect in automatic1111/stable-diffusion-webui

  automatic1111 · automatic1111/stable-diffusion-webui

  Medium6.1