CVE-2024-32024

Summary

CVE-2024-32024 is a newly identified vulnerability affecting the Kohya_ss GUI for Kohya's Stable Diffusion trainers. The issue resides in the `common_gui.py` file's `add_pre_postfix` function, which is susceptible to a path injection attack. This vulnerability allows an attacker to manipulate file paths, potentially leading to unintended code execution or data access. The vulnerability has been remedied in version 23.1.5. Users are strongly advised to update their software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.