CVE-2024-12375

6.5 mediumEPSS 0.9%

Medium (6.5) in automatic1111 stable-diffusion-webui. EPSS 0.9% chance of exploitation in the next 30 days.

A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c. This vulnerability allows an attacker to read arbitrary files on the system by sending a specially crafted request to the application.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-36
Published: 2025-03-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

automatic1111:stable-diffusion-webui

References

https://huntr.com/bounties/21952043-395f-4cd3-9374-b73ab9612f27

Check your stack JSON