PatchTheCVEstable-diffusion-webui vulnerabilities and fixes
Recent CVEs affecting stable-diffusion-webui, with upgrade or downgrade steps. 6 tracked.
Also searched as: stable diffusion webui.
stable-diffusion-webui has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-03-20. Highest priority: CVE-2024-10935 (score 51/100).
- CVE-2024-12375 MEDIUM 6.5 DOWNGRADE A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version
- CVE-2024-12374 MEDIUM 6.1 DOWNGRADE A stored cross-site scripting (XSS) vulnerability exists in automatic1111/stable-diffusion-webui version git 8
- CVE-2024-12074 MEDIUM 6.5 DOWNGRADE A Denial of Service (DoS) vulnerability was discovered in the file upload feature of automatic1111/stable-diff
- CVE-2024-11045 CRITICAL 9.6 DOWNGRADE A Cross-Site WebSocket Hijacking (CSWSH) vulnerability in automatic1111/stable-diffusion-webui version 1.10.0
- CVE-2024-11044 MEDIUM 6.1 DOWNGRADE An open redirect vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows a remote unauthen
- CVE-2024-10935 HIGH 7.5 DOWNGRADE automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server fails to handle
FAQ
How do I fix stable-diffusion-webui vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is stable-diffusion-webui being exploited right now?
None of the tracked stable-diffusion-webui CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which stable-diffusion-webui CVE should I patch first?
CVE-2024-10935 currently ranks highest (51/100): automatic1111/stable-diffusion-webui version 1.10.0 contains a vulnerability where the server fails to handle .