CVE-2024-12375: Local File Inclusion in automatic1111/stable-diffusion-webui

Published Mar 20, 2025

Updated

A local file inclusion vulnerability was identified in automatic1111/stable-diffusion-webui, affecting version git 82a973c. This vulnerability allows an attacker to read arbitrary files on the system by sending a specially crafted request to the application.

Affected Software

2 affected components

automatic1111 stable-diffusion-webui

automatic1111 stable-diffusion-webui=2024-07-27

Event History

Mar 20, 2025

CVE Published

via MITRE·10:10 AM

Data Sourced

via MITRE·10:10 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·10:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-12375?

CVE-2024-12375 is considered a high severity local file inclusion vulnerability.

How do I fix CVE-2024-12375?

To fix CVE-2024-12375, update to the latest version of automatic1111/stable-diffusion-webui that has addressed this vulnerability.

What versions are affected by CVE-2024-12375?

CVE-2024-12375 affects versions of automatic1111/stable-diffusion-webui prior to the git commit 82a973c.

What can an attacker do with CVE-2024-12375?

An attacker exploiting CVE-2024-12375 can read arbitrary files on the system by sending a specially crafted request.

Is CVE-2024-12375 exploitable remotely?

CVE-2024-12375 is primarily a local file inclusion vulnerability and requires an attacker to execute requests against the application.