Critical · published September 18, 2025
🚨 A sneaky path traversal vulnerability in invokeai v6.0.0a1 and below lets attackers rewrite server files just by tweaking a filename! 🔥 Think of it as a delivery driver who can suddenly access and delete any package in the warehouse just by mislabeling the address. With just a slight nudge, they can wipe out critical documents, like SSH keys or databases, that are vital for operations. In the wrong hands, this vulnerability is absolutely devastating! An attacker could read sensitive files and delete anything from SSH keys to crucial configuration files, leading to total chaos in your system. Imagine losing access to your entire infrastructure because someone manipulated a filename—it would be a catastrophic breach of confidentiality, integrity, and availability!
Think of it as a delivery driver who can suddenly access and delete any package in the warehouse just by mislabeling the address. With just a slight nudge, they can wipe out critical documents, like SSH keys or databases, that are vital for operations. This vulnerability allows attackers to exploit the GET /api/v1/images/download/{bulk_download_item_name} endpoint to perform path traversal, enabling them to read and delete any files on the server due to improper input validation.
In the wrong hands, this vulnerability is absolutely devastating! An attacker could read sensitive files and delete anything from SSH keys to crucial configuration files, leading to total chaos in your system. Imagine losing access to your entire infrastructure because someone manipulated a filename—it would be a catastrophic breach of confidentiality, integrity, and availability! To protect your server, update invokeai to at least version 6.0.0a2 immediately. Additionally, implement rigorous input validation to sanitize filename arguments and prevent unauthorized file access. Regular audits of file permissions are also a smart move! You've got this! Take these steps, and you'll have your system fortified in no time. 🛡️