Executive Summary

This vulnerability exists in invokeai version v6.0.0a1 and below, where attackers can exploit the GET /api/v1/images/download/{bulk_download_item_name} endpoint to perform path traversal and arbitrary file deletion. By manipulating the filename arguments, attackers can access and delete any files on the server, including critical system files such as SSH keys, databases, and configuration files.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to severe impacts on confidentiality, integrity, and availability of the affected system. Attackers can read sensitive files, delete important data, and compromise critical system files, potentially causing system outages, data loss, and unauthorized access to sensitive information.

Useful 0 Not Useful 0