CVE-2026-82288 | AUTOMATIC1111 stable-diffusion-webui up to 1.10.1 Cmd Flags /sdapi/v1/cmd-flags gradio_auth/api_auth missing encryption

August 28, 2026 Yanac

A vulnerability was found in AUTOMATIC1111 stable-diffusion-webui up to 1.10.1 and classified as problematic. This affects an unknown part of the file /sdapi/v1/cmd-flags of the component Cmd Flags. Executing a manipulation of the argument gradio_auth/api_auth can lead to missing encryption of sensitive data.

The identification of this vulnerability is CVE-2026-82288. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More