PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-65012 invoke-ai CVE debrief

CVE-2026-65012 is an unauthenticated directory enumeration vulnerability in InvokeAI before 6.13.7. The vulnerability exists in the GET /api/v2/models/scan_folder endpoint, which accepts attacker-controlled scan_path parameters. This allows unauthenticated attackers to recursively enumerate arbitrary server filesystem directories and use HTTP response codes to determine file existence and readability, bypassing multi-user mode access controls. The vulnerability has a CVSS score of 6.3 and a severity of MEDIUM. Security teams and administrators responsible for InvokeAI installations should be aware of this vulnerability.

Vendor
invoke-ai
Product
InvokeAI
CVSS
MEDIUM 6.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-22
Original CVE updated
2026-07-22
Advisory published
2026-07-22
Advisory updated
2026-07-22

Who should care

Security teams and administrators responsible for InvokeAI installations should be aware of this vulnerability. The vulnerability allows unauthenticated attackers to enumerate server filesystem directories, potentially leading to unauthorized access to sensitive information. Affected operator, platform, vulnerability-management, and security-team impact should be reviewed.

Technical summary

The vulnerability is caused by the lack of proper validation and sanitization of user-input scan_path parameters in the GET /api/v2/models/scan_folder endpoint. This allows attackers to traverse the server filesystem and enumerate directories. The vulnerability has a CVSS score of 6.3 and a severity of MEDIUM. Affected product deployments should be reviewed for exposure, and owners should be assigned for follow-up. The vulnerability affects InvokeAI before version 6.13.7.

Defensive priority

Medium

Recommended defensive actions

  • Update InvokeAI to version 6.13.7 or later
  • Restrict access to the GET /api/v2/models/scan_folder endpoint
  • Monitor for suspicious activity on the server filesystem
  • Review compensating controls for exposed systems while remediation is scheduled and verified
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review
  • Track exceptions, retest remediated assets, and close the item only after evidence is documented
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The vulnerability was reported by Vulncheck and is tracked as CVE-2026-65012. The NVD entry for this vulnerability is currently being processed. Evidence of the vulnerability's existence and impact is limited, and defenders should verify the affected scope and severity. The CVE record was published on 2026-07-22T17:16:58.990Z and has not been modified since then. Additional information may be available through the official CVE record and NVD detail page.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-22T17:16:58.990Z and has not been modified since then.