Live › vulnerability › CVE-2026-111984
Go to dashboardIn AUTOMATIC1111 stable-diffusion-webui up to 1.10.1, the extra-networks card builder (create_item_html in modules/ui_extra_networks.py) puts a model's filename into HTML without escaping. A file whose name contains a quote and markup runs script in the WebUI origin when the page loads. A PoC is public in the upstream issue. No fix exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run AUTOMATIC1111 stable-diffusion-webui up to 1.10.1, especially if the interface is reachable from other users or the network. The sources do not say whether a default install exposes the Card Builder path, and they do not name a fixed version. Instances used only locally by a single trusted user carry less risk.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| stable-diffusion-webui | github | <= 1.10.1 | – |
1.10.1 is the latest release and master HEAD, and the project has not responded to issue #17497s suggested patch: wrap item[filename'] (about line 273) and the search_terms values (about lines 312-320) in html.escapeEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html of the file modules/ui_extra_networks.py of the component Card Builder. The manipulation of the argument filename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-111984")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.