Stable Diffusion Webui 1.10.0 - Open Redirect

An open redirect vulnerability exists in Stable-Diffusion-Webui 1.10.0, where the file parameter in the /file= endpoint can be manipulated to redirect users to malicious websites. This could facilitate phishing attacks by tricking users into visiting attacker-controlled URLs. id: CVE-2024-11044...

CVE-2026-111987

A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Extra-Networks Card Builder. Such manipulation of the argument metadata.sshsmodelhash...

CVE-2026-111986

A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function getobjfromstr of the file modules/sdmodels.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. T...

CVE-2026-111987

A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Extra-Networks Card Builder. Such manipulation of the argument metadata.sshsmodelhash...

CVE-2026-111987 AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting

A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Extra-Networks Card Builder. Such manipulation of the argument metadata.sshsmodelhash...

CVE-2026-111987 AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting

A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Extra-Networks Card Builder. Such manipulation of the argument metadata.sshsmodelhash...

CVE-2026-111987 AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting

A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Extra-Networks Card Builder. Such manipulation of the argument metadata.sshsmodelhash...

CVE-2026-111987

A Cross-Site Scripting (XSS) vulnerability exists in AUTOMATIC1111 stable-diffusion-webui up to version 1.10.1 . The flaw is located within the Extra-Networks Card Builder component, specifically in the read_metadata_from_safetensors function of the modules/sd_models.py file. An attacker can trig...

EUVD-2026-103507

A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Extra-Networks Card Builder. Such manipulation of the argument metadata.sshsmodelhash...

CVE-2026-111986 AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection

A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function getobjfromstr of the file modules/sdmodels.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. T...

CVE-2026-111986 AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection

A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function getobjfromstr of the file modules/sdmodels.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. T...

EUVD-2026-103506

A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function getobjfromstr of the file modules/sdmodels.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. T...

CVE-2026-111986

The AUTOMATIC1111 stable-diffusion-webui (up to version 1.10.1 ) is vulnerable to a code injection flaw within the Model Instantiation component. Specifically, the get_obj_from_str function in modules/sd_models.py fails to properly handle the Target argument, allowing an attacker to initiate a re...

CVE-2026-111986 AUTOMATIC1111 stable-diffusion-webui Model Instantiation sd_models.py get_obj_from_str code injection

A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function getobjfromstr of the file modules/sdmodels.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. T...

CVE-2026-111986

A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function getobjfromstr of the file modules/sdmodels.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. T...

CVE-2026-111984

A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function createitemhtml of the file modules/uiextranetworks.py of the component Card Builder. The manipulation of the argument filename leads to cross site scripting. It is possible to initiate t...

CVE-2026-111985

A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Metadata Extraction. The manipulation of the argument header length field results in allocation of resources. It i...

CVE-2026-111985 AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources

A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Metadata Extraction. The manipulation of the argument header length field results in allocation of resources. It i...

CVE-2026-111985 AUTOMATIC1111 stable-diffusion-webui Metadata Extraction sd_models.py read_metadata_from_safetensors allocation of resources

A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Metadata Extraction. The manipulation of the argument header length field results in allocation of resources. It i...

EUVD-2026-103476

A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Metadata Extraction. The manipulation of the argument header length field results in allocation of resources. It i...