Invokeai
Monthly
Unauthenticated directory enumeration in InvokeAI before 6.13.7 exposes arbitrary server filesystem paths via the GET /api/v2/models/scan_folder endpoint, which accepts attacker-controlled scan_path parameters without requiring authentication. Beyond path traversal and file existence probing, the vendor's own release notes confirm a closely related attack path capable of recovering full contents of invokeai.yaml and api_keys.yaml - files that may contain API tokens for HuggingFace, Civitai, Alibaba, and OpenAI services. A publicly available exploit exists (GitHub issue #9365); no active exploitation is confirmed in CISA KEV.
Unauthenticated directory enumeration in InvokeAI before 6.13.7 exposes arbitrary server filesystem paths via the GET /api/v2/models/scan_folder endpoint, which accepts attacker-controlled scan_path parameters without requiring authentication. Beyond path traversal and file existence probing, the vendor's own release notes confirm a closely related attack path capable of recovering full contents of invokeai.yaml and api_keys.yaml - files that may contain API tokens for HuggingFace, Civitai, Alibaba, and OpenAI services. A publicly available exploit exists (GitHub issue #9365); no active exploitation is confirmed in CISA KEV.