automatic1111 Stable Diffusion WebUI Cross-Site WebSocket Hijacking Vulnerability

A Cross-Site WebSocket Hijacking (CSWSH) vulnerability exists in automatic1111/stable-diffusion-webui version 1.10.0. This vulnerability allows an attacker to clone a malicious server extension from a GitHub repository. The issue stems from inadequate validation of WebSocket connections at ws://127.0.0.1:7860/queue/join, which permits unauthorized actions on the server. Exploitation of this vulnerability could result in the unauthorized cloning of server extensions, execution of malicious scripts, data exfiltration, and a potential denial-of-service condition.

Impact

Exploitation of this vulnerability could lead to unauthorized cloning of server extensions, execution of malicious scripts, data exfiltration, and a potential denial-of-service condition.