CVE-2026-77814

Name of the Vulnerable Software and Affected Versions Stable Diffusion WebUI (affected versions not specified)

Description The is path trusted function in scripts/iib/api.py improperly validates requested paths by using path.startswith(parent path) without appending a path separator. This allows access to directories that start with the same name as an allowed parent directory, such as accessing /data/images private/secret.txt when only /data/images is permitted. This flaw leads to unauthorized file disclosure via FileResponse. The issue affects network-exposed deployments where access control is enabled via IIB ACCESS CONTROL or when the host is started with share, ngrok, listen, or server name options. The get enable access control function in scripts/iib/tool.py determines if this confinement check is active.

Recommendations Update the is path trusted function to compare the requested path against the parent path joined with os.sep to ensure proper directory confinement.