CVE-2026-65012 InvokeAI < 6.13.7 Unauthenticated Directory Enumeration via scan_folder
Unauthenticated attackers can enumerate server directories and determine file existence via the scan_folder endpoint, bypassing access controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-65012?
CVE-2026-65012 is a medium-severity vulnerability in invoke-ai InvokeAI, published on 22 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
InvokeAI before 6.13.7 contains an unauthenticated directory enumeration vulnerability in the GET /api/v2/models/scan_folder endpoint that accepts attacker-controlled scan_path parameters. Unauthenticated attackers can recursively enumerate arbitrary server filesystem directories and use HTTP response codes to determine file existence and readability, bypassing multi-user mode access controls.
Weakness: CWE-306
Which versions are affected by CVE-2026-65012?
How do I fix CVE-2026-65012?
No fix has been published for CVE-2026-65012 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-65012 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-65012 exists.
Sources
Also known as GHSA-r6m9-hrqm-hx9h.