CVE-2026-111987: AUTOMATIC1111 stable-diffusion-webui Extra-Networks Card Builder sd_models.py read_metadata_from_safetensors cross site scripting
A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. Affected by this vulnerability is the function readmetadatafromsafetensors of the file modules/sdmodels.py of the component Extra-Networks Card Builder. Such manipulation of the argument metadata.sshsmodelhash leads to cross site scripting. The attack can be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of AUTOMATIC1111 stable-diffusion-webui up to version 1.10.1 are affected where the Extra-Networks Card Builder processes safetensors metadata through read_metadata_from_safetensors.
What does an attacker need to exploit it?
The attacker needs to cause a crafted __metadata__.sshs_model_hash value to be processed by the affected function. The attack can be launched remotely, requires user interaction, and does not require privileges.
How mature is exploitation?
A public exploit is available and may be used. The vulnerability has a low attack complexity and is rated medium severity with a 4.3 CVSS score.
Is a vendor fix available?
The provided information states that the project was notified through an issue report but had not responded. No fix or mitigation is identified in the available data.