CVE-2025-6237

Description

### Path Traversal Vulnerability in InvokeAI A path traversal vulnerability in **InvokeAI** (versions < 6.7.0) allows an unauthenticated remote attacker to read files outside the intended media directory via the **bulk downloads** API. The endpoint accepts a user-controlled file/item name and concatenates it into a filesystem path without proper canonicalization or allow-listing. By supplying sequences such as `../` (or absolute paths), an attacker can cause the server to traverse directories and return arbitrary files. In certain storage or back-end configurations, abusing attacker-controlled paths can also lead to unintended overwriting or deletion of files referenced by the crafted path. The issue is fixed in **6.7.0**, which normalizes and validates input paths and rejects traversal attempts. **Affected versions:** `< 6.7.0` **Patched version:** `6.7.0`

How to fix CVE-2025-6237

To remediate CVE-2025-6237, upgrade the affected package to a fixed version below.

• —upgrade to 6.7.0 or later

Is CVE-2025-6237 being exploited?

Low — EPSS is 0.1%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• from 0, < 6.7.0

CVSS scores

References (6)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2025-6237
• PATCHgithub.com/invoke-ai/InvokeAI
• WEBgithub.com/invoke-ai/InvokeAI/blob/v6.0.0a1/invokeai/app/api/routers/images.py#L493-L524
• WEBgithub.com/invoke-ai/InvokeAI/pull/8548/commits/eff565ae6ace1c8458f187245690bff0513f1b9e