# CVE-2026-111986: AUTOMATIC1111 stable-diffusion-webui code injection in model instantiation

Source: https://junglewise.ai/threats/cve-2026-111986-a-vulnerability-was-determined-in-automatic1111-stable-diffusion  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-18. Updated: 2026-10-18  
License: CC BY 4.0 with a link back

CVE-2026-111986 · Severity: medium · CVSS 6.3 · Published 2026-10-18

AUTOMATIC1111 stable-diffusion-webui is a web interface for Stable Diffusion image generation. An attacker can craft a malicious model package with a YAML configuration file that executes arbitrary code when a victim loads the model through the web UI, potentially giving the attacker full control of the system running the application.

Technologies: [AUTOMATIC1111 Stable Diffusion WebUI](https://junglewise.ai/threats/technologies/stable-diffusion-webui). Vendors: [AUTOMATIC1111](https://junglewise.ai/threats/vendors/automatic1111).

## Quick answers

**Is CVE-2026-111986 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-111986 being exploited in the wild.

**How severe is CVE-2026-111986?** Medium severity, with a CVSS score of 6.3, published 18 October 2026.

**Which products and versions are affected?** AUTOMATIC1111 Stable Diffusion WebUI up to 1.10.1.

**Is there a fix for CVE-2026-111986?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-111986 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-111986?** Check whether you run AUTOMATIC1111 Stable Diffusion WebUI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability exists in the model instantiation logic (modules/sd_models.py, get_obj_from_str function) which resolves the model.target parameter from YAML configuration files using importlib and getattr, then invokes the resolved object with user-supplied parameters. An attacker can place a malicious YAML sidecar file with the same basename as a checkpoint to trigger arbitrary code execution when the model is loaded. The attack requires a victim to select or load the malicious model through the UI.

## Affected products

- AUTOMATIC1111 stable-diffusion-webui up to 1.10.1

## Timeline

- 2026-09-30: disclosed: Issue reported on GitHub
- 2026-10-18: advisory

## References

- [https://github.com/AUTOMATIC1111/stable-diffusion-webui/](https://github.com/AUTOMATIC1111/stable-diffusion-webui/)
- [https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17499](https://github.com/AUTOMATIC1111/stable-diffusion-webui/issues/17499)

## Related threats

- [AUTOMATIC1111 stable-diffusion-webui stored XSS in Extra-Networks Card Builder](https://junglewise.ai/threats/cve-2026-111987-a-vulnerability-was-identified-in-automatic1111-stable-diffusion)
- [AUTOMATIC1111 stable-diffusion-webui resource exhaustion in metadata extraction](https://junglewise.ai/threats/cve-2026-111985-a-vulnerability-was-found-in-automatic1111-stable-diffusion)
- [AUTOMATIC1111 stable-diffusion-webui cross-site scripting in card builder](https://junglewise.ai/threats/cve-2026-111984-a-vulnerability-has-been-found-in-automatic1111-stable-diffusion)
- [Stable Diffusion WebUI credential disclosure in /sdapi/v1/cmd-flags endpoint](https://junglewise.ai/threats/cve-2026-82288-stable-diffusion-webui-credential-disclosure-in-sdapi-v1-cmd)