RCE via unsafe torch.load in invoke-ai/invokeai (5.3.1-5.4.2)
Date: 2024
Affected: invoke-ai/invokeai 5.3.1-5.4.2
Attack vector: deserialization
Category: vulnerability-disclosure
Severity: Critical

RCE in invokeai 5.3.1-5.4.2 via the /api/v2/models/install API: unsafe deserialization of model files using torch.load without validation enables attackers to embed malicious code in model files that executes on load.


Mitigations:

Architectural layers (MAESTRO):