CVE-2026-111985 Details
Description
A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. This impacts the function read_metadata_from_safetensors of the file modules/sd_models.py of the component Metadata Extraction. The manipulation of the argument header length field results in allocation of resources. It is possible to launch the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability exists in AUTOMATIC1111 stable-diffusion-webui versions through 1.10.1, specifically within the metadata extraction component. The issue arises in the 'read_metadata_from_safetensors' function located in 'modules/sd_models.py'. The vulnerability allows for remote exploitation by manipulating the header length field, leading to excessive resource allocation. This issue was reported to the project, but no response has been received.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 18, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/AUTOMATIC1111/stable-diffusion-webui/ | [email protected] | ProductVendor |
| https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17498 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/user-attachments/files/32811560/poc.zip | [email protected] | Broken LinkExploit |
| https://vuldb.com/cve/CVE-2026-111985 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1005484 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/421651 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/421651/cti | [email protected] | AdvisoryPermission Required |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-400 | Uncontrolled Resource Consumption | [email protected] |
| CWE-770 | Allocation of Resources Without Limits or Throttling | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| AUTOMATIC1111 stable-diffusion-webui | <= 1.10.1 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 18, 2026 | New CVE Received | [email protected] |