Zanllp
Monthly
Symlink escape in Infinite Image Browsing (zanllp/infinite-image-browsing) allows remote attackers to read arbitrary files from the host filesystem by placing a symbolic link inside a scanned image directory, which satisfies a string-based path containment check that does not resolve symlinks. The flaw is exploitable only in network-exposed Stable Diffusion WebUI deployments where access control is active - those started with share, ngrok, listen, or server_name options, or with IIB_ACCESS_CONTROL=enable. No public exploit or CISA KEV listing has been identified at time of analysis; an upstream fix is available as commit 4057a624 (PR #969), but no specifically tagged patched release has been confirmed.
Path traversal in Infinite Image Browsing (zanllp/infinite-image-browsing), a Stable Diffusion WebUI extension, exposes arbitrary files outside configured allowed directories to unauthenticated remote attackers by exploiting a missing trailing path separator in the is_path_trusted prefix comparison. The bypass is only exploitable in network-exposed deployments - those started with --share, --ngrok, --listen, or --server_name flags, or with IIB_ACCESS_CONTROL=enable - which are precisely the configurations relying on this confinement for protection. No public exploit has been identified at time of analysis, but the bypass is trivially replicable from the public patch diff; an upstream fix is confirmed at commit 4057a624.
The zanllp sd-webui-infinite-image-browsing (aka Infinite Image Browsing) extension before 977815a for stable-diffusion-webui (aka Stable Diffusion web UI), if Gradio authentication is enabled. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.
Symlink escape in Infinite Image Browsing (zanllp/infinite-image-browsing) allows remote attackers to read arbitrary files from the host filesystem by placing a symbolic link inside a scanned image directory, which satisfies a string-based path containment check that does not resolve symlinks. The flaw is exploitable only in network-exposed Stable Diffusion WebUI deployments where access control is active - those started with share, ngrok, listen, or server_name options, or with IIB_ACCESS_CONTROL=enable. No public exploit or CISA KEV listing has been identified at time of analysis; an upstream fix is available as commit 4057a624 (PR #969), but no specifically tagged patched release has been confirmed.
Path traversal in Infinite Image Browsing (zanllp/infinite-image-browsing), a Stable Diffusion WebUI extension, exposes arbitrary files outside configured allowed directories to unauthenticated remote attackers by exploiting a missing trailing path separator in the is_path_trusted prefix comparison. The bypass is only exploitable in network-exposed deployments - those started with --share, --ngrok, --listen, or --server_name flags, or with IIB_ACCESS_CONTROL=enable - which are precisely the configurations relying on this confinement for protection. No public exploit has been identified at time of analysis, but the bypass is trivially replicable from the public patch diff; an upstream fix is confirmed at commit 4057a624.
The zanllp sd-webui-infinite-image-browsing (aka Infinite Image Browsing) extension before 977815a for stable-diffusion-webui (aka Stable Diffusion web UI), if Gradio authentication is enabled. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.