{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/stable-diffusion/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-77814"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Stable Diffusion WebUI"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Stable Diffusion"],"content_html":"\u003cp\u003eCVE-2026-77814 is a path traversal vulnerability residing in the \u003ccode\u003escripts/iib/api.py\u003c/code\u003e file of the Stable Diffusion WebUI. The vulnerability stems from an insecure implementation of the \u003ccode\u003eis_path_trusted\u003c/code\u003e function, which performs a prefix check using \u003ccode\u003epath.startswith(parent_path)\u003c/code\u003e without appending a path separator. Consequently, if \u003ccode\u003e/data/images\u003c/code\u003e is the intended authorized directory, an attacker can bypass this restriction by requesting a path that starts with the same string, such as \u003ccode\u003e/data/images_private/secret.txt\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eThe security control is governed by \u003ccode\u003eget_enable_access_control\u003c/code\u003e in \u003ccode\u003escripts/iib/tool.py\u003c/code\u003e. It is active when \u003ccode\u003eIIB_ACCESS_CONTROL\u003c/code\u003e is set to 'enable', or when the WebUI is exposed via \u003ccode\u003e--share\u003c/code\u003e, \u003ccode\u003e--ngrok\u003c/code\u003e, \u003ccode\u003e--listen\u003c/code\u003e, or \u003ccode\u003e--server_name\u003c/code\u003e flags. Deployments using these network-exposure options are vulnerable to unauthorized file disclosure. This flaw is critical for defenders because it allows attackers to bypass intended file system confinement to retrieve sensitive configuration or system files.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated remote attackers to perform path traversal and access files outside of the intended web root. This leads to the disclosure of sensitive data, such as system configuration files or other private assets reachable by the user account running the WebUI service. The risk is elevated in shared or network-exposed environments where the WebUI is intentionally configured to listen on external interfaces.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade Stable Diffusion WebUI to a version that applies the fix, which uses \u003ccode\u003eos.sep\u003c/code\u003e to enforce directory boundaries during path validation.\u003c/li\u003e\n\u003cli\u003eUntil patched, restrict network access to the WebUI interface using a firewall or VPN to prevent exploitation of the path traversal logic in network-exposed deployments.\u003c/li\u003e\n\u003cli\u003eAudit logs for HTTP requests containing directory traversal sequences or attempts to access directories that share a common prefix with authorized storage paths.\u003c/li\u003e\n\u003cli\u003eDisable IIB_ACCESS_CONTROL if the functionality is not required or if the risk cannot be mitigated through network isolation.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-08-21T15:25:24Z","date_published":"2026-08-21T15:25:24Z","id":"https://feed.craftedsignal.io/briefs/2026-08-path-traversal-sd-webui-afbdff6f/","summary":"CVE-2026-77814 is a path traversal vulnerability in Stable Diffusion WebUI caused by improper prefix validation in the is_path_trusted function, enabling unauthorized file access in network-exposed deployments.","title":"Path Traversal in Stable Diffusion WebUI","url":"https://feed.craftedsignal.io/briefs/2026-08-path-traversal-sd-webui-afbdff6f/"}],"language":"en","title":"CraftedSignal Threat Feed - Stable Diffusion","version":"https://jsonfeed.org/version/1.1"}