AUTOMATIC1111 stable-diffusion-webui vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20265

Newest CVEs

• CVE-2026-111987

  AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting

  AUTOMATIC1111 · stable-diffusion-webui

  Medium5.3
• CVE-2026-111986

  AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection

  AUTOMATIC1111 · stable-diffusion-webui

  Medium5.3
• CVE-2026-111985

  AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources

  AUTOMATIC1111 · stable-diffusion-webui

  Medium5.3
• CVE-2026-111984

  AUTOMATIC1111 stable-diffusion-webui Card Builder ui_extra_networks.py create_item_html cross site scripting

  AUTOMATIC1111 · stable-diffusion-webui

  Medium5.3
• CVE-2026-82288

  Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags

  AUTOMATIC1111 · stable-diffusion-webui

  High8.7
• CVE-2024-31462

  Limited file write in Stable-diffusion-webui - GHSL-2024-010

  AUTOMATIC1111 · stable-diffusion-webui

  Medium6.3