Live › vulnerability › CVE-2026-111986
Go to dashboardAUTOMATIC1111 stable-diffusion-webui 1.10.1 (and master) loads a same-name .yaml next to a checkpoint and resolves its model.target to any Python callable, so a downloaded model package can run code when the checkpoint is selected. It is not a direct remote request: the victim must place and select the package. No patch exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Anyone running AUTOMATIC1111 stable-diffusion-webui 1.10.0/1.10.1 or current master who downloads model packages (folder or zip) from third-party sources and selects them. Exploitation needs a malicious YAML placed in models/Stable-diffusion/ and the checkpoint selected (user interaction), or write access to that directory or the API option that selects checkpoints. Can skip: installs only using first-party models with no sidecar YAMLs you did not write.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| stable-diffusion-webui | github | >= 1.10.0, <= 1.10.1 (also master) | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function get_obj_from_str of the file modules/sd_models.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-111986")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.