CVE-2026-82288
Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio_auth and api_auth values in cleartext. Unauthenticated attackers can access this endpoint to retrieve configured usernames and passwords, then use them to authenticate to the interface and access the application.
| CWE | CWE-522 |
| Vendor | automatic1111 |
| Product | stable-diffusion-webui |
| Published | Aug 28, 2026 |
| Last Updated | Aug 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for automatic1111 stable-diffusion-webui
Be the first to know when new high vulnerabilities affecting automatic1111 stable-diffusion-webui are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected Versions
AUTOMATIC1111 / stable-diffusion-webui
0 ≤ 1.10.1
References
github.com: https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17411 github.com: https://github.com/AUTOMATIC1111/stable-diffusion-webui github.com: https://github.com/AUTOMATIC1111/stable-diffusion-webui/blob/82a973c04367123ae98bd9abdf80d9eda9b910e2/modules/api/api.py vulncheck.com: https://www.vulncheck.com/advisories/stable-diffusion-webui-credential-disclosure-via-sdapi-v1-cmd-flags
Credits
🔍 George Chen