CVE-2026-111986
Received Received - Intake

Code Injection in AUTOMATIC1111 Stable Diffusion WebUI

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: VulDB

Description
A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function get_obj_from_str of the file modules/sd_models.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-111986
EUVD
EUVD-2026-103506

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
AUTOMATIC1111 stable-diffusion-webui 1.10.0
AUTOMATIC1111 stable-diffusion-webui 1.10.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-74 The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability allows remote code execution in AUTOMATIC1111's stable-diffusion-webui up to version 1.10.1. An attacker can create a malicious YAML file with the same name as a model checkpoint file. When the checkpoint is loaded, the webui automatically parses the YAML file and dynamically imports a Python object specified in the file's model.target field. By setting this field to torch.hub.load, the attacker can execute arbitrary code from a hubconf.py file in the same directory, gaining full control over the webui process.

Detection Guidance

Check for YAML files with the same basename as .safetensors model checkpoint files in your AUTOMATIC1111 stable-diffusion-webui directory. Look for files named like model.yaml alongside model.safetensors. Inspect the YAML content for a model.target field that may reference dynamic imports like torch.hub.load.

Impact Analysis

This vulnerability allows attackers to execute arbitrary code on your system if you are running an affected version of AUTOMATIC1111's stable-diffusion-webui. This could lead to complete system compromise, data theft, malware installation, or unauthorized access to sensitive information. The attack can be initiated remotely without authentication, making it particularly dangerous for exposed instances.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations using affected versions may face compliance violations, legal penalties, and reputational damage due to potential data breaches or unauthorized data processing.

Mitigation Strategies

Upgrade AUTOMATIC1111 stable-diffusion-webui to a version beyond 1.10.1 if available. Remove any YAML sidecar files associated with model checkpoints. Disable automatic YAML file adoption by modifying the code to validate or restrict dynamic imports from user-supplied files.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111986. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart