# CVE-2026-111984: AUTOMATIC1111 stable-diffusion-webui cross-site scripting in card builder

Source: https://junglewise.ai/threats/cve-2026-111984-a-vulnerability-has-been-found-in-automatic1111-stable-diffusion  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-18. Updated: 2026-10-18  
License: CC BY 4.0 with a link back

CVE-2026-111984 · Severity: medium · CVSS 4.3 · Published 2026-10-18

AUTOMATIC1111 stable-diffusion-webui is a web interface for Stable Diffusion image generation. An attacker can craft a malicious model filename that, when unpacked by a victim, executes arbitrary JavaScript in the WebUI with full access to the victim's session and data when the application loads.

Technologies: [AUTOMATIC1111 Stable Diffusion WebUI](https://junglewise.ai/threats/technologies/stable-diffusion-webui). Vendors: [AUTOMATIC1111](https://junglewise.ai/threats/vendors/automatic1111).

## Quick answers

**Is CVE-2026-111984 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-111984 being exploited in the wild.

**How severe is CVE-2026-111984?** Medium severity, with a CVSS score of 4.3, published 18 October 2026.

**Which products and versions are affected?** AUTOMATIC1111 Stable Diffusion WebUI up to 1.10.1.

**Is there a fix for CVE-2026-111984?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-111984 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-111984?** Check whether you run AUTOMATIC1111 Stable Diffusion WebUI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A cross-site scripting vulnerability exists in the create_item_html function of modules/ui_extra_networks.py. The filename parameter is interpolated into HTML attributes without escaping, and the card HTML is inserted via innerHTML in JavaScript, allowing script execution. The attack requires a victim to download and extract a malicious model file, with the payload executed automatically on page load without user interaction.

## Affected products

- AUTOMATIC1111 stable-diffusion-webui up to 1.10.1

## Timeline

- 2026-09-29: disclosed: Issue reported on GitHub
- 2026-10-18: advisory

## References

- [https://github.com/AUTOMATIC1111/stable-diffusion-webui/](https://github.com/AUTOMATIC1111/stable-diffusion-webui/)
- [https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17497](https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17497)

## Related threats

- [AUTOMATIC1111 stable-diffusion-webui stored XSS in Extra-Networks Card Builder](https://junglewise.ai/threats/cve-2026-111987-a-vulnerability-was-identified-in-automatic1111-stable-diffusion)
- [AUTOMATIC1111 stable-diffusion-webui code injection in model instantiation](https://junglewise.ai/threats/cve-2026-111986-a-vulnerability-was-determined-in-automatic1111-stable-diffusion)
- [AUTOMATIC1111 stable-diffusion-webui resource exhaustion in metadata extraction](https://junglewise.ai/threats/cve-2026-111985-a-vulnerability-was-found-in-automatic1111-stable-diffusion)
- [Stable Diffusion WebUI credential disclosure in /sdapi/v1/cmd-flags endpoint](https://junglewise.ai/threats/cve-2026-82288-stable-diffusion-webui-credential-disclosure-in-sdapi-v1-cmd)