CVE-2025-6237 Path Traversal and Arbitrary File Deletion in invoke-ai/invokeai
Attackers can exploit path traversal to read and delete arbitrary files on the server via a vulnerable API endpoint.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-6237?
CVE-2025-6237 is a critical path traversal vulnerability in invoke-ai/invokeai, published on 18 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in invokeai version v6.0.0a1 and below allows attackers to perform path traversal and arbitrary file deletion via the GET /api/v1/images/download/{bulk_download_item_name} endpoint. By manipulating the filename arguments, attackers can read and delete any files on the server, including critical system files such as SSH keys, databases, and configuration files. This vulnerability results in high confidentiality, integrity, and availability impacts.
Weakness: CWE-73
Which versions are affected by CVE-2025-6237?
3 open source packages ship an affected version, including invokeai.
| Package | Affected | Fixed in |
|---|---|---|
invokeai PyPI | All versions | 6.7.0 |
invokeai PyPI | All versions | 6.7.0 |
invokeai PyPI | All versions | 6.7.0 |
How do I fix CVE-2025-6237?
Upgrade invokeai to 6.7.0 or later.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-6237 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-6237 exists.
Sources
Also known as GHSA-vv9c-xxg7-wmv7, PYSEC-2026-359.