InvokeAI versions prior to 6.7.0 contain a critical path traversal vulnerability in the bulk downloads API. This flaw allows unauthenticated remote attackers to read arbitrary files outside the intended media directory by manipulating file path inputs. In some configurations, it may also enable overwriting or deletion of files. The vulnerability is fixed in version 6.7.0 by normalizing and validating input paths to prevent traversal.