invoke-ai

Products

ProductCVEsExploitedLatest
invoke-ai/invokeai5–Sep 18, 2025
InvokeAI1–Jul 22, 2026

Exploited and recent CVEs

  • CVE-2026-65012 Medium 5.3 InvokeAI < 6.13.7 Unauthenticated Directory Enumeration via scan_folder 0.4%
  • CVE-2025-6237 Critical 9.8 Path Traversal and Arbitrary File Deletion in invoke-ai/invokeai 0.4%
  • CVE-2024-11043 High 7.5 Denial of Service (DoS) via Large Payload in Board Name Field in invoke-ai/invokeai 0.7%
  • CVE-2024-10821 High 7.5 Denial of Service (DoS) in invoke-ai/invokeai 0.6%
  • CVE-2024-11042 Critical 9.1 Arbitrary File Delete in invoke-ai/invokeai 1.6%
  • CVE-2024-12029 Critical 9.8 Remote Code Execution via Model Deserialization in invoke-ai/invokeai 6.0%