Skip to content
OpenAdvisories

Product · invoke-ai

InvokeAI

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-65012

    InvokeAI < 6.13.7 Unauthenticated Directory Enumeration via scan_folder

    InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scan_folder endpoint that accepts attacker-controlled scan_path parameters. Unauthenticated attackers can recursively enumerate arbitrary server f…

    invoke-ai InvokeAI