CVE-2026-82288

Summary

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio_auth and api_auth values in cleartext. Unauthenticated attackers can access this endpoint to retrieve configured usernames and passwords, then use them to authenticate to the interface and access the application.

Affected Software

Weaknesses

• CWE-522: Insufficiently Protected Credentials

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17411

References

• https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17411
• https://github.com/AUTOMATIC1111/stable-diffusion-webui
• https://github.com/AUTOMATIC1111/stable-diffusion-webui/blob/82a973c04367123ae98bd9abdf80d9eda9b910e2/modules/api/api.py
• https://www.vulncheck.com/advisories/stable-diffusion-webui-credential-disclosure-via-sdapi-v1-cmd-flags

• ←Previous
• Next→