CVE-2026-111984
Received Received - Intake

Cross-Site Scripting in AUTOMATIC1111 Stable Diffusion WebUI

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: VulDB

Description
A vulnerability has been found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This affects the function create_item_html of the file modules/ui_extra_networks.py of the component Card Builder. The manipulation of the argument filename leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-111984
EUVD
EUVD-2026-103475

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
AUTOMATIC1111 stable-diffusion-webui 1.10.0
AUTOMATIC1111 stable-diffusion-webui 1.10.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a cross-site scripting (XSS) flaw in AUTOMATIC1111 stable-diffusion-webui up to version 1.10.1. It occurs in the function create_item_html in modules/ui_extra_networks.py where the filename argument is manipulated. The issue allows attackers to inject malicious JavaScript into the WebUI by crafting a filename with HTML markup, which is then rendered without proper escaping. When the page loads, the injected script executes in the user's browser session.

Detection Guidance

Check for filenames in your AUTOMATIC1111 stable-diffusion-webui models directory containing HTML or JavaScript payloads like quotes or script tags. Inspect the ui_extra_networks.py file for unsanitized filename usage in lines 273 and 312-320. Review web server logs for unusual requests to /sdapi/v1/refresh-checkpoints.

Impact Analysis

An attacker could exploit this to run arbitrary JavaScript in your browser when you load the WebUI. This could allow them to interact with same-origin endpoints, such as sending requests to internal APIs like /sdapi/v1/refresh-checkpoints. The attack requires you to have a malicious model file with a specially crafted filename in your models directory. No user interaction beyond opening the WebUI is needed for the exploit to trigger.

Compliance Impact

This vulnerability allows remote attackers to inject and execute arbitrary JavaScript in the WebUI's origin through malicious filenames. This could lead to unauthorized data access, modification, or exfiltration, violating GDPR's data protection principles and HIPAA's security requirements for protected health information.

Mitigation Strategies

Update to the latest version of AUTOMATIC1111 stable-diffusion-webui if available. Manually apply html.escape to filename variables in modules/ui_extra_networks.py at lines 273 and 312-320. Avoid downloading models from untrusted sources and rename suspicious filenames to remove special characters.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111984. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart