by Kastro
Paper/Archive/CVE-2024-11042

CVE-2024-11042

invoke-ai invoke-ai/invokeai — Arbitrary File Delete in invoke-ai/invokeai

EPSS 2%public exploitCVSS 9.1
critical.is priorityof 100
52
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 75.3.753 × 2015.1Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

In invoke-ai/invokeai version v5.0.2, the web API `POST /api/v1/images/delete` is vulnerable to Arbitrary File Deletion. This vulnerability allows unauthorized attackers to delete arbitrary files on the server, potentially including critical or sensitive system files such as SSH keys, SQLite databases, and configuration files. This can impact the integrity and availability of applications relying on these files.

Affected

ProductAffectedFixed inSource
invoke-ai/invokeaiunspecified – < 5.3.05.3.0CNA

Scores by source

@huntr_ai (CNA)9.1CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refhuntr.com/bounties/635535a7-c804-4789-ac3a-48d951263987refgithub.com/invoke-ai/invokeai/commit/5440c037674882b2ab7acd59087e9bb04b49657a