CVE-2024-11043 - CVE House
Back to Database
Status published High CVE-2024-11043

Denial of Service (DoS) via Large Payload in Board Name Field in invoke-ai/invokeai

Vulnerability Description

A Denial of Service (DoS) vulnerability was discovered in the /api/v1/boards/{board_id} endpoint of invoke-ai/invokeai version v5.0.2. This vulnerability occurs when an excessively large payload is sent in the board_name field during a PATCH request. By sending a large payload, the UI becomes unresponsive, rendering it impossible for users to interact with or manage the affected board. Additionally, the option to delete the board becomes inaccessible, amplifying the severity of the issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-11043

Credits & Attribution

No credits recorded in the NVD database.

References

More from invoke-ai

View All →
CVE-2025-6237
Path Traversal and Arbitrary File Deletion in invoke-ai/invokeai
Critical 9.8
CVE-2024-12029
Remote Code Execution via Model Deserialization in invoke-ai/invokeai
Critical 9.8
CVE-2024-11042
Arbitrary File Delete in invoke-ai/invokeai
Critical 9.1
CVE-2024-10821
Denial of Service (DoS) in invoke-ai/invokeai
High 7.5

Affected Vendor

Affected Software

invoke-ai/invokeai
Vulnerable Versions:
unspecified

Timeline

Official Publish: March 20th, 2025
Last Modified: March 20th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-400

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1498 Network Denial of Service
Impact