Vulnerability · Published Sep 18, 2025 · Assigned by @huntr_ai
CVE-2025-6237Path Traversal and Arbitrary File Deletion in invoke-ai/invokeai
Critical 9.8
In plain English
A critical-severity security flaw in invoke-ai/invokeai from invoke-ai. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
A vulnerability in invokeai version v6.0.0a1 and below allows attackers to perform path traversal and arbitrary file deletion via the GET /api/v1/images/download/{bulk_download_item_name} endpoint. By manipulating the filename arguments, attackers can read and delete any files on the server, including critical system files such as SSH keys, databases, and configuration files. This vulnerability results in high confidentiality, integrity, and availability impacts.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | invokeai | 6.7.0 | GHSA-vv9c-xxg7-wmv7 |
| PyPI | invokeai | 6.7.0 | PYSEC-2026-359 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| invoke-ai | invoke-ai/invokeai | unspecified – through latest |
Weakness: CWE-73 · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H