Live › vulnerability › CVE-2026-111987
Go to dashboardAUTOMATIC1111 stable-diffusion-webui up to 1.10.1 does not sanitize the __metadata__.sshs_model_hash field read from safetensors model files in the Extra-Networks Card Builder. A remote attacker who supplies a crafted model file can run script in the browser of a user who views the page.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Instances of AUTOMATIC1111 stable-diffusion-webui up to 1.10.1 that load untrusted safetensors model files are exposed, since the flaw is in how model metadata is read and shown in the Extra-Networks cards. Teams that only load models they built or vetted themselves face less risk. Whether the web UI is reachable from outside the network is not stated in the sources.
No product ranges from the sources yet.
1.10.1 are reported as affected.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Extra-Networks Card Builder. Such manipulation of the argument metadata.sshs_model_hash leads to cross site scripting. The attack can be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-111987")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.