CVE-2024-12029

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-12029
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-12029.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-12029
Aliases
Published
2025-03-20T10:08:45Z
Modified
2026-10-21T02:52:41Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Remote Code Execution via Model Deserialization in invoke-ai/invokeai
Details

A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through 5.4.2 via the /api/v2/models/install API. The vulnerability arises from unsafe deserialization of model files using torch.load without proper validation. Attackers can exploit this by embedding malicious code in model files, which is executed upon loading. This issue is fixed in version 5.4.3.

Database specific 
{
    "cna_assigner":  "@huntr_ai",
    "cwe_ids":  [
        "CWE-502"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/12xxx/CVE-2024-12029.json"
}
References

Affected packages

Git / github.com/invoke-ai/invokeai

Affected ranges

Type
GIT
Repo
https://github.com/invoke-ai/invokeai
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
b7132ce9e72ee2e3c5daeba0dd12f555d38fa391
Fixed
756008dc5899081c5aa51e5bd8f24c1b3975a59e
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "5.4.3"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "SplitRange"
        },
        {
            "range":  [
                {
                    "fixed":  "756008dc5899081c5aa51e5bd8f24c1b3975a59e"
                }
            ],
            "source":  "REFERENCES_COMMIT"
        }
    ]
}

Affected versions

2.*
2.0.0-rc4
2.2.0-rc2
2.2.0-rc4
2.2.4-rc1
2.2.4-rc2
3.*
3.4.0post1
3.6.3
3.7.0
Other
pre-nodes
v3-latest
v3-latest-test
vinstaller-test-delete
release-0.*
release-0.95
release-1.*
release-1.03
release-1.04
release-1.05
release-1.06
release-1.08
release-1.09
release-1.10
release-2.*
release-2.0.0
release_0.*
release_0.91
release_0.96
release_1.*
release_1.0
release_1.01
v.*
v.2.3.1-rc1
v2.*
v2.0.0
v2.0.1
v2.0.2
v2.1.2
v2.1.3
v2.1.3p1
v2.2.0
v2.2.1
v2.2.2
v2.2.3
v2.2.4
v2.2.5
v2.2.5p1
v2.3.0
v2.3.0-rc1
v2.3.0-rc2
v2.3.3-rc7
v3.*
v3.0-latest
v3.0.0
v3.0.0+a2
v3.0.0+a3
v3.0.0+a4
v3.0.0+a5
v3.0.0+a6
v3.0.0+a7
v3.0.0+a8
v3.0.0+b9
v3.0.1
v3.0.1post1
v3.0.1post2
v3.0.2
v3.0.2post1
v3.0.2rc1
v3.1.0
v3.1.1rc1
v3.2.0
v3.4.0
v3.4.0post2
v3.5.0
v3.5.0rc5
v3.5.1
v3.6.0
v3.6.0rc1
v3.6.0rc2
v3.6.0rc3
v3.6.0rc4
v3.6.0rc5
v3.6.0rc6
v3.6.1
v3.6.2
v4.*
v4.0.0
v4.0.0rc1
v4.0.0rc2
v4.0.0rc3
v4.0.0rc4
v4.0.0rc5
v4.0.0rc6
v4.0.1
v4.0.2
v4.0.3
v4.0.4
v4.1.0
v4.2.0
v4.2.0a1
v4.2.0a2
v4.2.0a3
v4.2.0a4
v4.2.0b1
v4.2.0b2
v4.2.1
v4.2.2
v4.2.2post1
v4.2.3
v4.2.4
v4.2.5
v4.2.6
v4.2.6a1
v4.2.6post1
v4.2.6rc1
v4.2.7
v4.2.7rc1
v4.2.8
v4.2.8rc1
v4.2.8rc2
v4.2.9
v4.2.9rc1
v4.2.9rc2
v5.*
v5.0.0
v5.0.0.a1
v5.0.0.a2
v5.0.0.a3
v5.0.0.a4
v5.0.0.a5
v5.0.0.a6
v5.0.0.a7
v5.0.0.a8
v5.0.0.rc1
v5.0.0.rc2
v5.0.1
v5.0.2
v5.1.0
v5.1.0rc2
v5.1.0rc3
v5.1.0rc4
v5.1.0rc5
v5.1.1
v5.2.0
v5.2.0rc1
v5.2.0rc2
v5.3.0
v5.3.0rc1
v5.3.0rc2
v5.3.1
v5.3.1rc1
v5.4.0
v5.4.1
v5.4.1rc1
v5.4.1rc2
v5.4.2
v5.4.2rc1
v5.4.3rc1
v5.4.3rc2
version_0.*
version_0.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-12029.json"