Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

invoke-ai/invokeai

              main @ 5c464f8
            

Fixes

CVEs

CRITICAL

Peak severity

17.1%

Coverage

Highlights

Denial of Service: 17 prior fixes. Scrutinize any change in this area.

invokeai/app/services/session_processor/session_processor_default.py: most-fixed (3 issues). Treat as high-risk during review.

19 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Remote Code Execution: The application historically relied on unsafe deserialization mechanisms (like torch.load) for model configuration and model files, allowing arbitrary code execution if a user loaded a malicious model. Safe loaders like safetensors must be enforced.

Path Traversal: Several endpoints and components, including the bulk download system and image export utilities, failed to sanitize absolute pathing or relative dot-dot-slash characters, permitting attackers to download or write arbitrary files.

Denial of Service: The background queue execution logic in the default session processor repeatedly fell into 100% CPU utilization busy loops when the queue was empty or when executing paused states.