An unauthenticated credential disclosure vulnerability in AUTOMATIC1111 Stable Diffusion WebUI allows remote attackers to retrieve sensitive authentication configuration, leading to full application compromise.

The application improperly exposes the /sdapi/v1/cmd-flags endpoint, which returns parsed command-line arguments, including gradio_auth and api_auth settings, in cleartext. This flaw enables any unauthenticated user to extract configured credentials required to access the administrative interface.

Successful exploitation grants an attacker the ability to authenticate to the Stable Diffusion WebUI with the same privileges as the configured user. Because these credentials typically provide full administrative control, this vulnerability can lead to unauthorized data access, manipulation of generated content, and potential remote code execution depending on the server configuration. The CVSS score of 7.5 reflects the high impact on confidentiality and the ease of exploitation by unauthenticated actors.

Immediate Action: Update the stable-diffusion-webui installation to the latest version, which contains the security patch for the /sdapi/v1/cmd-flags endpoint.

Proactive Monitoring: Review web server access logs for repeated or suspicious requests to the /sdapi/v1/cmd-flags endpoint from external or unauthorized IP addresses.

Compensating Controls: Implement a Web Application Firewall (WAF) or ingress rule to restrict access to the /sdapi/v1/cmd-flags endpoint, effectively blocking public access until the application is patched.

Public Exploit Available: Unknown

Given the ease with which sensitive credentials can be extracted, administrators must prioritize patching this vulnerability immediately. If an immediate update is not feasible, ensure the instance is not exposed to the public internet and restrict access to the API endpoints via network-level controls to prevent unauthorized information disclosure.