Skip to content
OpenAdvisories

Vendor

invoke-ai

6 known vulnerabilities.

Products

invoke-ai/invokeai 5 InvokeAI 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-65012

    InvokeAI < 6.13.7 Unauthenticated Directory Enumeration via scan_folder

    InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scan_folder endpoint that accepts attacker-controlled scan_path parameters. Unauthenticated attackers can recursively enumerate arbitrary server f…

    invoke-ai InvokeAI