CVE-2026-82288

Received Received - Intake

Credential Disclosure in Stable Diffusion WebUI

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: VulnCheck

Description

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio_auth and api_auth values in cleartext. Unauthenticated attackers can access this endpoint to retrieve configured usernames and passwords, then use them to authenticate to the interface and access the application.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-28

Generated

2026-08-29

AI Q&A

2026-08-29

EPSS Evaluated

N/A

NVD

CVE-2026-82288

EUVD

EUVD-2026-67819

Affected Vendors & Products

Vendor	Product	Version / Range
stable_diffusion_webui	stable_diffusion_webui	to 1.10.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-522	The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

Executive Summary

Stable Diffusion WebUI through version 1.10.1 has a vulnerability where the /sdapi/v1/cmd-flags endpoint exposes sensitive command-line arguments in cleartext. This includes credentials like gradio_auth and api_auth, which are used for authentication. Unauthenticated attackers can access this endpoint to retrieve these credentials and then use them to log into the application.

Detection Guidance

Check if the /sdapi/v1/cmd-flags endpoint is accessible without authentication. Use curl to query the endpoint: curl http://<target-ip>:<port>/sdapi/v1/cmd-flags. If it returns cleartext credentials like gradio_auth or api_auth, the system is vulnerable.

Impact Analysis

If you use Stable Diffusion WebUI version 1.10.1 or earlier, attackers could gain access to your configured usernames and passwords. This could lead to unauthorized access to your instance, allowing attackers to manipulate the application, run unauthorized tasks, or exfiltrate sensitive data.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating confidentiality requirements under GDPR and HIPAA. Exposure of credentials may result in non-compliance with data protection and security standards, potentially leading to legal penalties and reputational damage.

Mitigation Strategies

Update Stable Diffusion WebUI to version 1.10.1 or later. If immediate update is not possible, restrict access to the /sdapi/v1/cmd-flags endpoint using a firewall or reverse proxy. Rotate all exposed credentials immediately.

Hi! I’m here to help you understand CVE-2026-82288. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70