Automatic1111 Stable-diffusion-webui vulnerabilities

• automatic1111 stable-diffusion-webui AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting CVE-2026-111987 5.3 MediumOctober 18, 2026
• automatic1111 stable-diffusion-webui AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection CVE-2026-111986 5.3 MediumOctober 18, 2026
• automatic1111 stable-diffusion-webui AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources CVE-2026-111985 5.3 MediumOctober 18, 2026
• automatic1111 stable-diffusion-webui AUTOMATIC1111 stable-diffusion-webui Card Builder ui_extra_networks.py create_item_html cross site scripting CVE-2026-111984 5.3 MediumOctober 18, 2026
• automatic1111 stable-diffusion-webui Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags CVE-2026-82288 8.7 HighAugust 28, 2026
• automatic1111 automatic1111/stable-diffusion-webui, stable-diffusion-webui +1 more Denial of Service in automatic1111/stable-diffusion-webui CVE-2024-12074 6.5 MediumMarch 20, 2025
• automatic1111 automatic1111/stable-diffusion-webui, stable-diffusion-webui +1 more Cross-Site WebSocket Hijacking (CSWSH) in automatic1111/stable-diffusion-webui CVE-2024-11045 9.6 CriticalMarch 20, 2025
• automatic1111 automatic1111/stable-diffusion-webui, stable-diffusion-webui +1 more Local File Inclusion in automatic1111/stable-diffusion-webui CVE-2024-12375 6.5 MediumMarch 20, 2025
• automatic1111 automatic1111/stable-diffusion-webui, stable-diffusion-webui +1 more Unauthenticated DoS via Multipart Boundary in automatic1111/stable-diffusion-webui CVE-2024-10935 7.5 HighMarch 20, 2025
• automatic1111 automatic1111/stable-diffusion-webui, stable-diffusion-webui +1 more Open Redirect in automatic1111/stable-diffusion-webui CVE-2024-11044 6.1 MediumMarch 20, 2025
• automatic1111 automatic1111/stable-diffusion-webui, stable-diffusion-webui +1 more Stored XSS in automatic1111/stable-diffusion-webui CVE-2024-12374 6.1 MediumMarch 20, 2025
• automatic1111 stable-diffusion-webui Limited file write in Stable-diffusion-webui - GHSL-2024-010 CVE-2024-31462 6.3 MediumApril 12, 2024