CVE-2026-82288CWE-522

CVE-2026-82288

High · published August 29, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
34.6
In the wild
Unconfirmed
What it is

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio_auth and api_auth values in cleartext. Unauthenticated attackers can access this endpoint to retrieve configured usernames and passwords, then use them to authenticate to the interface and access the application.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00414 · 34.6th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2026-08-29T00:20Z
References (5)
https://github.com/AUTOMATIC1111/stable-diffusion-webui · [email protected]https://github.com/AUTOMATIC1111/stable-diffusion-webui/blob/82a973c04367123ae98bd9abdf80d9eda9b910e2/modules/api/api.py · [email protected]https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17411 · [email protected]https://www.vulncheck.com/advisories/stable-diffusion-webui-credential-disclosure-via-sdapi-v1-cmd-flags · [email protected]https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17411 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 30 AUG 16:19Z
    EPSS moved — → 0%
    epss
  • 28 AUG 16:19Z
    Stable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags
    cvelistv5