Description

Stable Diffusion WebUI through 1.10.1 contains a credential disclosure vulnerability in the /sdapi/v1/cmd-flags endpoint that returns parsed command-line arguments including gradio_auth and api_auth values in cleartext. Unauthenticated attackers can access this endpoint to retrieve configured usernames and passwords, then use them to authenticate to the interface and access the application.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.5",
  "pubDate": "2026-08-28T20:20:20.393Z",
  "pubdate": "2026-08-28T20:20:20.393Z",
  "executiveSummary": "Stable Diffusion WebUI versions up to and including 1.10.1 are susceptible to a critical credential disclosure vulnerability originating from the /sdapi/v1/cmd-flags API endpoint.\nThe vulnerability is classified as an information exposure flaw, wherein the application erroneously serializes sensitive configuration parameters into the response body of a public-facing API endpoint.\nThis allows unauthenticated, remote attackers to retrieve cleartext credentials, specifically gradio_auth and api_auth settings, used to secure the WebUI interface and its associated API.\nThe risk implication is severe, as the exposure of these credentials facilitates unauthorized access to the application, potentially leading to full administrative takeover or exploitation of underlying system resources.\nThe vulnerability is exploitable by any network-adjacent or internet-exposed instance without requiring pre-existing authentication or specific privileges, making it a high-priority target for automated scanning and exploitation.",
  "technicalDetails": "The root cause of this vulnerability lies in the improper implementation of the /sdapi/v1/cmd-flags endpoint within the Stable Diffusion WebUI. This endpoint is designed to expose the parsed command-line arguments used during the application initialization process for diagnostic purposes.\nIn the affected versions (up to 1.10.1), the application logic fails to sanitize or filter sensitive security-related parameters from the command-line argument object before returning it in the API response. Specifically, the internal parser captures the --gradio-auth and --api-auth flags, which contain the username and password pairs defined by the system administrator during startup.\nThe attack flow is straightforward due to the lack of access controls on the /sdapi/v1/cmd-flags endpoint. An attacker performs an unauthenticated HTTP GET request to the endpoint. Upon receipt of the request, the application serializes the active configuration dictionary into a JSON payload and returns it in the response body. The attacker parses this JSON output to extract the cleartext credentials from the gradio_auth and api_auth keys.\nOnce these credentials are obtained, the attacker can leverage them to bypass the authentication mechanisms of the WebUI. Because the credentials grant administrative access to the interface, the attacker gains the ability to execute arbitrary generation tasks, manage API keys, and potentially manipulate system settings, depending on the permissions associated with the compromised account.\nThis vulnerability highlights a failure in secure coding practices regarding the exposure of sensitive configuration states in API responses. The scope of the vulnerability is global across all exposed Stable Diffusion WebUI instances that have been configured with authentication enabled, as the endpoint is active by default in vulnerable builds."
}