InvokeAI /api/v2/models/install torch.load deserialization RCE
Date: 2024-12
Affected: invokeai 5.3.1 - 5.4.2
Attack vector: deserialization
Category: real-world
Severity: Critical
CVE: CVE-2024-12029
CWE: CWE-502
CVSS: 9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Critical RCE in invoke-ai/invokeai 5.3.1 - 5.4.2. /api/v2/models/install downloads a user-provided model URL and loads it via torch.load() without validation/sandboxing; torch.load can execute arbitrary Python embedded in serialized model files. Patched in 5.4.3.


Mitigations:

Architectural layers (MAESTRO):