CyberRota Analysis
AI-GeneratedInvokeAI versions prior to 6.13.7 are vulnerable to an unauthenticated directory enumeration flaw in the GET /api/v2/models/scan_folder endpoint, allowing attackers to exploit the scan_path parameter. This vulnerability enables unauthorized users to recursively enumerate server filesystem directories, potentially exposing sensitive information and bypassing access controls. Organizations using affected versions should prioritize patching to mitigate the risk of data exposure and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scan_folder endpoint that accepts attacker-controlled scan_path parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP response codes to determine file existence and readability, bypassing multi-user mode access controls.