CVE-2026-111987
Received Received - Intake

XSS in AUTOMATIC1111 Stable Diffusion WebUI

Publication date: 2026-10-18

Last updated on: 2026-10-18

Assigner: VulDB

Description
A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Extra-Networks Card Builder. Such manipulation of the argument __metadata__.sshs_model_hash leads to cross site scripting. The attack can be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-18
Last Modified
2026-10-18
Generated
2026-10-18
AI Q&A
2026-10-18
EPSS Evaluated
N/A
NVD
CVE-2026-111987
EUVD
EUVD-2026-103507

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
AUTOMATIC1111 stable-diffusion-webui 1.10.0
AUTOMATIC1111 stable-diffusion-webui 1.10.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stored cross-site scripting (XSS) flaw in AUTOMATIC1111 stable-diffusion-webui up to version 1.10.1. It occurs in the function read_metadata_from_safetensors within modules/sd_models.py. The issue involves improper handling of the __metadata__.sshs_model_hash argument, allowing malicious input to trigger XSS when the WebUI page loads. An attacker can exploit this by crafting a LoRA safetensors file with a malicious payload in the sshs_model_hash metadata field.

Detection Guidance

Check for suspicious LoRA safetensors files with malicious metadata by inspecting the sshs_model_hash field in modules/sd_models.py. Look for files containing HTML or JavaScript payloads in metadata. Review browser console logs for XSS errors when loading the WebUI.

Impact Analysis

This vulnerability can lead to remote code execution (RCE) if combined with the extension installer. When a user opens the WebUI page, the malicious payload executes, manipulating the extension installer to automatically install a harmful extension. This can compromise the system without further user interaction, potentially allowing attackers to execute arbitrary code on the affected machine.

Compliance Impact

This vulnerability enables stored cross-site scripting (XSS) attacks that could lead to remote code execution (RCE) through malicious LoRA safetensors files. Such attacks may compromise user data, violate data integrity, and enable unauthorized access to systems handling sensitive information. This could result in non-compliance with GDPR (data protection and privacy) and HIPAA (healthcare data security) due to potential unauthorized data access, disclosure, or modification.

Mitigation Strategies

Disable extension installation via WebUI, update to the latest version if available, and remove any untrusted LoRA files. Monitor for unexpected file writes or extension installations. Restrict network access to the WebUI interface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-111987. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart