Skip to content
OpenAdvisories

Vendor

invoke-ai

6 known vulnerabilities.

Products

invoke-ai/invokeai 5 InvokeAI 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-11042 Public exploit

    Arbitrary File Delete in invoke-ai/invokeai

    In invoke-ai/invokeai version v5.0.2, the web API `POST /api/v1/images/delete` is vulnerable to Arbitrary File Deletion. This vulnerability allows unauthorized attackers to delete arbitrary files on the server, potentially including critical or sensitive syst…

    invoke-ai invoke-ai/invokeai invokeai PyPI
  • Critical 9.8
    CVE-2024-12029 Public exploit

    Remote Code Execution via Model Deserialization in invoke-ai/invokeai

    A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files using torch.load without proper validation. Attackers can e…

    invoke-ai invoke-ai/invokeai invokeai PyPI