CVE-2025-6237

Name of the Vulnerable Software and Affected Versions invokeai versions v6.0.0a1 and below

Description A vulnerability allows attackers to perform path traversal and arbitrary file deletion. This is achieved via the GET /api/v1/images/download/{bulk download item name} endpoint by manipulating the filename arguments. Attackers can read and delete any files on the server, including critical system files. This results in high impacts to confidentiality, integrity, and availability.

Recommendations For versions v6.0.0a1 and below, restrict access to the /api/v1/images/download/{bulk download item name} endpoint. As a temporary workaround, consider disabling the /api/v1/images/download/{bulk download item name} endpoint until a patch is available.