Local File Inclusion Vulnerability in Automatic1111's Stable Diffusion Web UI
CVE-2024-12375

6.5MEDIUM

Key Information:

Vendor

Automatic1111

Status
Automatic1111/stable-diffusion-webui
Vendor
CVE Published:
20 March 2025

What is CVE-2024-12375?

A local file inclusion (LFI) vulnerability has been discovered in Automatic1111's Stable Diffusion Web UI, specifically affecting version git 82a973c. This issue could enable an attacker to read arbitrary files from the system by crafting a malicious request, potentially leading to the exposure of sensitive information. It is essential for users to update to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

automatic1111/stable-diffusion-webui <= unspecified

References

https://huntr.com/bounties/21952043-395f-4cd3-9374-b73ab9...

CVSS V3.0

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.