Automatic1111 vulnerabilities
We track 3 vulnerabilities in Automatic1111 products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 28, 2026.
Latest Automatic1111 vulnerabilities
- 7.5 High severity
stable-diffusion-webui: Insufficiently Protected Credentials
Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio_auth and api_auth values in cleartext. Unauthenticated attackers can access thi
- 9.6 Critical severity
automatic1111/stable-diffusion-webui: Origin Validation Error
A Cross-Site WebSocket Hijacking (CSWSH) vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows an attacker to clone a malicious server extension from a GitHub repository. The vulnerability arises from the lack of proper validation on WebS
- 7.5 High severity
automatic1111/stable-diffusion-webui: Allocation of Resources Without Limits or Throttling
automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server fails to handle excessive characters appended to the end of multipart boundaries. This flaw can be exploited by sending malformed multipart requests with arbitrary ch