CVE-2026-111987

MediumCVSS 4.3

Published: 18/10/2026(UTC)Updated: 19/10/2026(UTC)Translated: 18/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

38th percentile - higher than 38% of all known CVEs

Summary

A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1 in the read_metadata_from_safetensors function of modules/sd_models.py, related to the Extra-Networks Card Builder component. Manipulation of the __metadata__.sshs_model_hash argument leads to cross site scripting, and the exploit is publicly available.

Risk Assessment

An attacker can remotely inject a malicious script that executes in the user's browser, potentially leading to session or data theft. The risk is high due to the publicly available exploit.

Recommendation

Avoid loading untrusted safetensors models and monitor the project for an official fix. Until it is released, consider restricting access to the web interface.

Other vulnerabilities in AUTOMATIC1111 stable-diffusion-webui

CVE-2026-111986Medium
A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected is the function get_obj_from_str of the file modules/sd_models.py of the component Model Instantiation. This manipulation of the argument Target causes code injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Original NVD description (English source)

A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Extra-Networks Card Builder. Such manipulation of the argument __metadata__.sshs_model_hash leads to cross site scripting. The attack can be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS