{"schema":"threatline.record/2","record":{"id":"CVE-2025-6237","aliases":["GHSA-vv9c-xxg7-wmv7","PYSEC-2026-359"],"summary":"InvokeAI has External Control of File Name or Path","details":"### Path Traversal Vulnerability in InvokeAI\n\nA path traversal vulnerability in **InvokeAI** (versions < 6.7.0) allows an unauthenticated remote attacker to read files outside the intended media directory via the **bulk downloads** API.\n\nThe endpoint accepts a user-controlled file/item name and concatenates it into a filesystem path without proper canonicalization or allow-listing. By supplying sequences such as `../` (or absolute paths), an attacker can cause the server to traverse directories and return arbitrary files.\n\nIn certain storage or back-end configurations, abusing attacker-controlled paths can also lead to unintended overwriting or deletion of files referenced by the crafted path.\n\nThe issue is fixed in **6.7.0**, which normalizes and validates input paths and rejects traversal attempts.\n\n**Affected versions:** `< 6.7.0`\n**Patched version:** `6.7.0`","categories":["Libraries & packages"],"product":"invokeai","vendor":"invoke-ai","ecosystem":"pip","affected_ranges":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-vv9c-xxg7-wmv7","source_modified_at":"2026-10-27T17:25:45Z","fetched_at":"2026-10-27T21:14:11.489891Z","package":{"ecosystem":"pip","name":"invokeai"},"range":"< 6.7.0"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2025-6237","source_modified_at":"2025-09-18T13:31:31.235Z","fetched_at":"2026-10-27T21:14:11.489891Z","product":"invoke-ai/invokeai","vendor":"invoke-ai","versions":[{"version":"unspecified","status":"affected","versionType":"custom","lessThanOrEqual":"latest"}],"defaultStatus":null},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-vv9c-xxg7-wmv7","source_modified_at":"2026-10-27T17:30:37.976036077Z","fetched_at":"2026-10-27T21:14:11.489891Z","package":{"name":"invokeai","ecosystem":"PyPI","purl":"pkg:pypi/invokeai"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.7.0"}]}],"versions":["2.2.4.5","2.2.4.6","2.2.4.7","2.2.5","2.3.0","2.3.0a0","2.3.0a1","2.3.0a2","2.3.0a3","2.3.0rc3","2.3.0rc4","2.3.0rc5","2.3.0rc6","2.3.0rc7","2.3.1","2.3.1.post1","2.3.1.post2","2.3.1rc4","2.3.2","2.3.2.post1","2.3.3","2.3.3rc1","2.3.4","2.3.4.post1","2.3.4a0","2.3.4rc1","2.3.5","2.3.5.post1","2.3.5.post2","2.3.5rc1","3.0.0","3.0.1","3.0.1.post1","3.0.1.post2","3.0.1.post3","3.0.1rc1","3.0.1rc2","3.0.2","3.0.2.post1","3.0.2a1","3.0.2rc1","3.1.0","3.1.1","3.1.1rc1","3.2.0","3.3.0","3.3.0.post1","3.3.0.post2","3.3.0.post3","3.4.0"]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/advisories/GHSA-vv9c-xxg7-wmv7","source_modified_at":"2026-10-27T17:25:45Z","fetched_at":"2026-10-27T21:14:11.489891Z","package":{"ecosystem":"pip","name":"invokeai"},"version":"6.7.0"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-vv9c-xxg7-wmv7","source_modified_at":"2026-10-27T17:30:37.976036077Z","fetched_at":"2026-10-27T21:14:11.489891Z","package":{"name":"invokeai","ecosystem":"PyPI","purl":"pkg:pypi/invokeai"},"version":"6.7.0"}],"cvss":9.3,"severity":"Critical","kev":{"listed":false},"epss":{"probability":0.00386,"percentile":0.32529,"score_date":"2026-10-27"},"published_at":"2025-09-18T08:34:08.039Z","modified_at":"2026-10-27T17:30:37.976036077Z","provenance":[{"source":"GitHub Advisory Database","url":"https://github.com/advisories/GHSA-vv9c-xxg7-wmv7","fetched_at":"2026-10-27T21:14:11.489891Z","source_modified_at":"2026-10-27T17:25:45Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2025-6237","fetched_at":"2026-10-27T21:14:11.489891Z","source_modified_at":"2025-09-18T13:31:31.235Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-vv9c-xxg7-wmv7","fetched_at":"2026-10-27T21:14:11.489891Z","source_modified_at":"2026-10-27T17:30:37.976036077Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2025-6237","fetched_at":"2026-10-27T21:14:11.489891Z","source_modified_at":"2026-10-27"}],"sources":["GitHub Advisory Database","CVE List","OSV","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-6237","source":"GitHub Advisory Database"},{"source":"CVE List","url":"https://huntr.com/bounties/54ac9589-7c88-4fd4-8512-8b2f19fbaedf","tags":["exploit"]},{"url":"https://github.com/invoke-ai/InvokeAI/blob/v6.0.0a1/invokeai/app/api/routers/images.py#L493-L524","source":"GitHub Advisory Database"},{"url":"https://github.com/invoke-ai/InvokeAI/pull/8548/commits/eff565ae6ace1c8458f187245690bff0513f1b9e","source":"GitHub Advisory Database"},{"url":"https://github.com/invoke-ai/InvokeAI/releases/tag/v6.7.0","source":"GitHub Advisory Database"},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/invokeai/PYSEC-2026-359.yaml","source":"GitHub Advisory Database"},{"url":"https://pypi.org/project/invokeai","source":"GitHub Advisory Database"},{"url":"https://github.com/advisories/GHSA-vv9c-xxg7-wmv7","source":"GitHub Advisory Database"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","ssvc":{"exploitation":"poc","automatable":"yes","technical_impact":"total","assessed_at":"2025-09-18T13:31:15.765857Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-27T17:30:37.976036077Z","content_hash":"96a2025219bf39aadd8e8ed919b3efafb5928c7f9f903c85331c71f7232ab1a8"}}