CVE-2026-77814 Infinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator
Attackers can read arbitrary files outside the allowed directory if access control is enabled, due to a flawed path prefix check.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-77814?
CVE-2026-77814 is a high-severity path traversal vulnerability in zanllp infinite-image-browsing, published on 21 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
is_path_trusted in scripts/iib/api.py compares the requested path against each allowed parent directory with path.startswith(parent_path), without appending a path separator. A directory whose name merely begins with an allowed path therefore satisfies the comparison, so where /data/images is allowed a request for /data/images_private/secret.txt is treated as trusted and served by FileResponse, disclosing files the confinement was meant to exclude. Whether the check applies depends on get_enable_access_control in scripts/iib/tool.py: it returns true when IIB_ACCESS_CONTROL is set to enable, false when set to disable, and otherwise true when the host Stable Diffusion WebUI was started with share, ngrok, listen or server_name, falling back to false. Confinement is therefore active in the network-exposed WebUI deployments that rely on it, while a standalone run with no such option serves every readable file regardless of this flaw. The fix compares against parent_path joined with os.sep.
Weakness: CWE-22
Which versions are affected by CVE-2026-77814?
How do I fix CVE-2026-77814?
No fix has been published for CVE-2026-77814 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-77814 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-77814 exists.
Sources
Also known as GHSA-6p87-gwpg-qp8w.