Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE

Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE Alternative Approach: Reverse Shell & Callback Test Overview This repository contains alternative payload approaches for the InvokeAI RCE vulnerability CVE-2024-12029 when SSH key injection fails. The payloads are designed to test if...

invokeai

invokeai This repository is a synthetic demo target for Endor Labs EXPOSURE. The current state is deliberately vulnerable HOT. EXPOSURE will report a HOT verdict against it. Tracked CVE: CVE-2024-10821 no upstream fix; mitigated only via a compensating control. A demo PR opened by EXPOSURE swaps...

invokeai-consumer

invokeai-consumer Demo consumer app pinned to invokeai==5.0.1 — used by Endor Labs to demonstrate vulnerability detection and exploit-chain analysis against the upstream invokeai library. v5.0.1 is the specific release named in the source CVE CVE-2024-10821...

fastnn (0.4.0), few-shot-learning-nlp (>=0.0.5, <=1.0.4) +9 more potentially affected by CVE-2026-69112 via accelerate (0.24.1)

accelerate PYPI version 0.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - fastnn 0.4.0 - few-shot-learning-nlp =0.0.5, =0.0.1a5, =3.4.0, =0.1.8, =0.2.25, =0.1.0, =0.1.2, =0.7.0, =0.10.0 Source cves: CVE-2026-69112...

exciton (>=2.5.3, <=2.9.3), invokeai (>=4.1.0, <=4.2.3) +2 more potentially affected by CVE-2026-69112 via accelerate (0.29.2)

accelerate PYPI version 0.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - exciton =2.5.3, =4.1.0, =0.0.23, =0.2.2 - recis-gpu 1.0.0.dev1 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

buzz-captions (1.1.0), hyfi-ml (0.2.0) +4 more potentially affected by CVE-2026-9856 via transformers (4.39.1)

transformers PYPI version 4.39.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - buzz-captions 1.1.0 - hyfi-ml 0.2.0 - integral-deid =0.1.0, =4.0.0rc6, =0.0.1, =2.2.8, =2.4.5 Source cves: CVE-2026-9856 Source advisor...

aiforthechurch (>=0.1.0, <=0.5.0), alignment-handbook (>=0.1.0, <=0.2.0) +19 more potentially affected by CVE-2026-69112 via accelerate (0.23.0)

accelerate PYPI version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - aiforthechurch =0.1.0, =0.1.0, =1.0.0, =0.1.66, =2.3.0, =0.0.1a2, =3.2.0, =0.1.1, =0.1.3, =0.0.2, =0.1.0, =0.2.1 and more Source cves:...

fastnn (0.4.0), few-shot-learning-nlp (>=0.0.5, <=1.0.4) +9 more potentially affected by CVE-2026-69112 via accelerate (0.24.1)

accelerate PYPI version 0.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - fastnn 0.4.0 - few-shot-learning-nlp =0.0.5, =0.0.1a5, =3.4.0, =0.1.8, =0.2.25, =0.1.0, =0.1.2, =0.7.0, =0.10.0 Source cves: CVE-2026-69112...

exciton (>=2.5.3, <=2.9.3), invokeai (>=4.1.0, <=4.2.3) +2 more potentially affected by CVE-2026-69112 via accelerate (0.29.2)

accelerate PYPI version 0.29.2 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - exciton =2.5.3, =4.1.0, =0.0.23, =0.2.2 - recis-gpu 1.0.0.dev1 Source cves: CVE-2026-69112 Source advisory: OSV:GHSA-4J2P-28Q2-5M79...

autotrain-advanced (>=0.7.102, <=0.7.118), documentsreader (1.1.5) +14 more potentially affected by CVE-2026-69112 via accelerate (0.30.1)

accelerate PYPI version 0.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autotrain-advanced =0.7.102, =0.122.0, =4.2.4, =0.0.1, =7.7.0, =0.0.1rc6, =0.6.6, =0.1.0, =0.0.1, =0.0.1, =1.0.1 and more Source cves:...

buzz-captions (1.1.0), hyfi-ml (0.2.0) +4 more potentially affected by CVE-2026-9856 via transformers (4.39.1)

transformers PYPI version 4.39.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - buzz-captions 1.1.0 - hyfi-ml 0.2.0 - integral-deid =0.1.0, =4.0.0rc6, =0.0.1, =2.2.8, =2.4.5 Source cves: CVE-2026-9856 Source advisor...

dynamic-prompting (>=0.2.4, <=0.2.6), embedprepro (>=0.1.0, <=0.12.0) +6 more potentially affected by CVE-2026-9856 via transformers (4.41.1)

transformers PYPI version 4.41.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - dynamic-prompting =0.2.4, =0.1.0, =4.2.4, =0.1.0, =0.0.23, =0.0.4, =0.0.6 Source cves: CVE-2026-9856 Source advisory:...

CVE-2026-65012

InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scanfolder endpoint that accepts attacker-controlled scanpath parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP...

CVE-2026-65012

InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scanfolder endpoint that accepts attacker-controlled scanpath parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP...

CVE-2026-65012 InvokeAI < 6.13.7 Unauthenticated Directory Enumeration via scan_folder

InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scanfolder endpoint that accepts attacker-controlled scanpath parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP...

CVE-2026-65012 InvokeAI < 6.13.7 Unauthenticated Directory Enumeration via scan_folder

InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scanfolder endpoint that accepts attacker-controlled scanpath parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP...

CVE-2026-65012

InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scanfolder endpoint that accepts attacker-controlled scanpath parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP...

EUVD-2026-47744

InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scanfolder endpoint that accepts attacker-controlled scanpath parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP...

PT-2026-63437

InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scan folder endpoint that accepts attacker-controlled scan path parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP...

CVE-2026-65012: Missing Authentication for Critical Function

InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scanfolder endpoint that accepts attacker-controlled scanpath parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP...