A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1. (CVE-2026-111987)

CVE-2026-111987 describes a cross-site scripting vulnerability in the AUTOMATIC1111 stable-diffusion-webui software, specifically affecting versions prior to 1.10.2. The vulnerability resides in the read_metadata_from_safetensors function of the modules/sd_models.py file, part of the Extra-Networks Card Builder component. An attacker can manipulate the __metadata__.sshs_model_hash argument to execute cross-site scripting attacks remotely. Although the exploit is publicly available, there is no indication that it is actively exploited in the wild. The project was notified early but has not provided a patch or official response.

The vulnerability allows remote attackers to perform cross-site scripting attacks by manipulating metadata arguments, potentially leading to client-side script execution in users' browsers. This can result in limited impact such as UI manipulation or session hijacking. There is no indication of confidentiality or availability impact. The CVSS score is 4.3 (low severity).

No official fix or patch has been released by the vendor as of the published date. Users should monitor the project for updates and consider restricting access to the vulnerable component to trusted users only until a patch is available. Since the vendor has not responded, caution is advised when processing untrusted metadata inputs.