Description
A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files using torch.load without proper validation. Attackers can exploit this by embedding malicious code in model files, which is executed upon loading. This issue is fixed in version 5.4.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| invoke-ai | invoke-ai/invokeai | unspecified – < 5.4.3 | 5.4.3 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
InvokeAI RCE
exploit/linux/http/invokeai_rce_cve_2024_12029
GitHub 1 repository
-
Lu3ky13/Alternative-Approach-Reverse-Shell-Callback-Test-InvokeAI-RCE ★ 0 · Apr 15, 2026
This repository contains alternative payload approaches for the InvokeAI RCE vulnerability (CVE-2024-12029) when SSH key injection fails. The payloads are designed to test if pickle deserialization i…
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | invokeai | >= 5.3.1, < 5.4.3rc2 | 5.4.3rc2 | GHSA-mcrp-whpw-jp68 |
| PyPI | invokeai | >= 5.3.1, < 5.4.3rc1 | 5.4.3rc1 | PYSEC-2025-9 |