A critical path traversal vulnerability in InvokeAI allows unauthenticated remote attackers to read or delete arbitrary system files, posing a severe risk to server integrity and data confidentiality.

This is a path traversal flaw (CWE-73) located in the GET /api/v1/images/download/{bulk_download_item_name} endpoint. The application fails to properly sanitize filename arguments, allowing unauthenticated attackers to escape the intended directory and access or destroy sensitive files such as SSH keys and configuration data.

The vulnerability carries a CVSS score of 9.8, reflecting its critical potential for full system compromise. Successful exploitation results in the unauthorized disclosure of sensitive credentials and the destruction of critical system files, which can lead to complete loss of service, data exfiltration, and unauthorized administrative access to the underlying infrastructure.

Immediate Action: Since a specific patch version is not currently identified in the provided data, users should restrict network access to the InvokeAI API to trusted sources only and monitor for any updates from the vendor. If an update is released to address this issue, it should be prioritized for immediate deployment.

Proactive Monitoring: Security teams should monitor web server access logs for suspicious requests containing directory traversal sequences, such as multiple dot-dot-slash patterns, directed toward the API download endpoint.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to inspect and block incoming HTTP requests to the /api/v1/images/download/ path that contain path traversal characters or non-standard file path syntax.

Public Exploit Available: Unknown.

Given the critical severity of this vulnerability and the potential for total system compromise, administrators must treat this as a high-priority issue. Until a vendor-supplied patch is available, limit exposure by isolating the affected server from public-facing networks and implementing strict input validation at the WAF level. Monitor vendor security bulletins closely for the release of a corrective update.