A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. (CVE-2026-111985)

CVE-2026-111985 describes a vulnerability in the AUTOMATIC1111 stable-diffusion-webui project affecting versions up to 1.10.1. The flaw exists in the Metadata Extraction component, specifically in the read_metadata_from_safetensors function within modules/sd_models.py. An attacker can manipulate the header length argument to trigger resource allocation issues remotely. The vulnerability has a CVSS 3.1 base score of 4.3, indicating low severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts availability only. The issue was responsibly disclosed but the project has not yet responded or issued a patch. Exploit code is publicly available.

The vulnerability allows remote attackers to cause resource exhaustion or denial of service by manipulating the header length field during metadata extraction. There is no impact on confidentiality or integrity. The severity is low, and no active exploitation in the wild is confirmed.

No official fix or patch is currently available. Users should monitor the project for updates or advisories. Until a patch is released, consider restricting access to the vulnerable service or applying network-level controls to limit exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.