Skip to main content

Infinite Image Browsing CVE-2026-77814

| EUVDEUVD-2026-63992 HIGH
Path Traversal (CWE-22)
2026-08-21 VulnCheck GHSA-6p87-gwpg-qp8w
Path Traversal Infinite Image Browsing
8.7
CVSS 4.0 · Vendor: VulnCheck
Share

Severity by source

Vendor (VulnCheck) PRIMARY
8.7 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.5 HIGH

Network-accessible in exposed deployments, no authentication required (PR:N) per CVSS 4.0 input; high confidentiality from arbitrary file read; no integrity or availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

3
Source Code Evidence Fetched
Aug 21, 2026 - 15:31 vuln.today
Analysis Generated
Aug 21, 2026 - 15:31 vuln.today
CVE Published
Aug 21, 2026 - 15:03 cve.org
HIGH 8.7

DescriptionCVE.org

is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed a request for /data/images_private/secret.txt is treated as trusted and served by FileResponse, disclosing files the confinement was meant to exclude. Whether the check applies depends on get_enable_access_control in scripts/iib/tool.py: it returns true when IIB_ACCESS_CONTROL is set to enable, false when set to disable, and otherwise true when the host Stable Diffusion WebUI was started with share, ngrok, listen or server_name, falling back to false. Confinement is therefore active in the network-exposed WebUI deployments that rely on it, while a standalone run with no such option serves every readable file regardless of this flaw. The fix compares against parent_path joined with os.sep.

AnalysisAI

Path traversal in Infinite Image Browsing (zanllp/infinite-image-browsing), a Stable Diffusion WebUI extension, exposes arbitrary files outside configured allowed directories to unauthenticated remote attackers by exploiting a missing trailing path separator in the is_path_trusted prefix comparison. The bypass is only exploitable in network-exposed deployments - those started with --share, --ngrok, --listen, or --server_name flags, or with IIB_ACCESS_CONTROL=enable - which are precisely the configurations relying on this confinement for protection. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Recon
Identify network-exposed Stable Diffusion WebUI instance
Delivery
Confirm Infinite Image Browsing extension is active
Exploit
Identify an allowed directory prefix from API behavior or docs
Install
Craft HTTP request targeting a sibling path sharing that prefix
C2
Bypass is_path_trusted prefix-only comparison
Execute
FileResponse returns restricted file contents
Impact
Exfiltrate sensitive data
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires that the Infinite Image Browsing access control mechanism be active, which occurs under exactly two conditions: (1) the environment variable IIB_ACCESS_CONTROL is explicitly set to enable, or (2) the host Stable Diffusion WebUI process was started with any of the network-exposure flags --share, --ngrok, --listen, or --server_name, which automatically enables access control via get_enable_access_control. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 8.7 (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H) accurately reflects the severity within the subset of deployments where access control is active - namely, network-exposed instances where the flaw's confinement bypass is the only barrier between an attacker and sensitive files. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker targeting a Stable Diffusion WebUI instance started with --share or --listen sends a crafted HTTP GET request to the Infinite Image Browsing file-serving API using a path such as /data/images_private/model_config.yaml, where /data/images is a configured allowed directory. Because is_path_trusted evaluates path.startswith('/data/images') without a trailing separator, the path passes validation and FileResponse returns the file. …
Remediation Upstream fix available (PR/commit); released patched version not independently confirmed. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Identify all Stable Diffusion installations with Infinite Image Browsing extension, prioritizing deployments configured with network-sharing flags (--share, --ngrok, --listen, --server_name) or IIB_ACCESS_CONTROL=enable; disable network exposure temporarily if immediate patching is not possible. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Infinite Image Browsing

View all
CVE-2026-77815 HIGH
8.7 Aug 21

Symlink escape in Infinite Image Browsing (zanllp/infinite-image-browsing) allows remote attackers to read arbitrary fil

Same weakness CWE-22 – Path Traversal

View all
CVE-2019-3396 CRITICAL POC
9.8
CVE-2019-19781 CRITICAL POC
9.8
CVE-2020-5902 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2021-27065 HIGH POC
7.8
CVE-2019-11510 CRITICAL POC
10.0
CVE-2022-37042 CRITICAL POC
9.8

Same technique Path Traversal

View all
CVE-2019-19781 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2021-27065 HIGH POC
7.8
CVE-2018-20250 HIGH POC
7.8
CVE-2022-37042 CRITICAL POC
9.8
CVE-2025-64446 CRITICAL POC
9.8
CVE-2022-30333 HIGH POC
7.5

Share

CVE-2026-77814 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy