Live › vulnerability › CVE-2026-111985
Go to dashboardAUTOMATIC1111 stable-diffusion-webui up to 1.10.1 does not validate the header length field when reading safetensors model metadata in modules/sd_models.py. A remote attacker can supply a crafted model file that makes the server allocate excessive resources.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run AUTOMATIC1111 stable-diffusion-webui at version 1.10.1 or earlier, especially if the instance accepts model files or metadata from users or the network. The sources do not say whether a fixed version exists or whether the project has responded. Instances that are not reachable from outside a trusted network are less exposed.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| stable-diffusion-webui | github | >= 1.10.0, <= 1.10.1 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Metadata Extraction. The manipulation of the argument header length field results in allocation of resources. It is possible to launch the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-111985")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.