fc-stable-diffusion-plus Insecure Permissions Vulnerability Allowing Privilege Escalation

A vulnerability exists in fc-stable-diffusion-plus versions through 1.0.18, where insecure permissions in the execution role allow attackers to escalate privileges. This could lead to unauthorized access to temporary security credentials of execution roles, enabling further actions such as compromising the customer's cloud account.

Impact

Exploitation of this vulnerability could directly compromise all functions in Alibaba Function Compute, allowing attackers to steal temporary security credentials of execution roles and potentially take over the customer's cloud account.