PT-2025-38303 · Invokeai · Invokeai

Published 2025-09-18 · Updated 2025-09-19 · CVE-2025-6237

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions invokeai versions v6.0.0a1 and below

Description A vulnerability allows attackers to perform path traversal and arbitrary file deletion. This is achieved via the GET /api/v1/images/download/{bulk download item name} endpoint by manipulating the filename arguments. Attackers can read and delete any files on the server, including critical system files. This results in high impacts to confidentiality, integrity, and availability.

Recommendations For versions v6.0.0a1 and below, restrict access to the /api/v1/images/download/{bulk download item name} endpoint. As a temporary workaround, consider disabling the /api/v1/images/download/{bulk download item name} endpoint until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-73

CWE-22

Related Identifiers

CVE-2025-6237

GHSA-VV9C-XXG7-WMV7

Affected Products

Invokeai

References · 12

• 🔥 https://huntr.com/bounties/54ac9589-7c88-4fd4-8512-8b2f19fbaedf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-6237 · Security Note
• https://osv.dev/vulnerability/GHSA-vv9c-xxg7-wmv7 · Vendor Advisory
• https://github.com/invoke-ai/InvokeAI/pull/8548/commits/eff565ae6ace1c8458f187245690bff0513f1b9e · Note
• https://github.com/invoke-ai/InvokeAI/releases/tag/v6.7.0 · Note
• https://github.com/invoke-ai/InvokeAI/blob/v6.0.0a1/invokeai/app/api/routers/images.py#L493-L524 · Note
• https://github.com/invoke-ai/InvokeAI · Note
• https://t.me/CVEtracker/32828 · Telegram Post
• https://twitter.com/CveFindCom/status/1968595632852979781 · Twitter Post
• https://twitter.com/CCBalert/status/1969020759528861972 · Twitter Post
• https://twitter.com/CVEnew/status/1968923646556062153 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1968615999499894999 · Twitter Post