v6.13.8
invoke-ai/InvokeAIv6.13.8Aug 13, 2026by lstein
Upgrading?
AI Summary
This is a security patch release fixing critical vulnerabilities in versions through 6.13.7 that allowed arbitrary code execution and unauthorized network connections.
Key Highlights
- Fix for arbitrary code execution via custom nodes directory
- Fix for unauthorized network connection vulnerability
- Security patch for versions 6.13.7 and below
Full Release Notes
# InvokeAI Version 6.13.8 ## ⚠️ This is a security patch release Recent versions of InvokeAI through 6.13.7 contain two security holes: 1. An attacker can craft a URL payload that overwrites files in the server's custom nodes directory, allowing for execution of arbitrary code on the next startup. On Windows systems, the hole could allow an arbitrary file to be placed anywhere on the filesystem that the server has access to. 2. A second bugs allows the server to be tricked into connecting to arbitrary networks and services on the local LAN or the Internet. Both scenarios are closed by this release, and InvokeAI users are strongly encouraged to upgrade. Many thanks to Abhinash Singh and Arpit Jain for independently reporting issue #1. **Full Changelog**: https://github.com/invoke-ai/InvokeAI/compare/v6.13.7...v6.13.8
Related Repositories
openclaw/openclaw★ 392,695
The AI that really does things. Any OS. Any Platform. The lobster way. 🦞
nilbuild/developer-roadmap★ 370,068
Interactive roadmaps, guides and other educational content to help developers grow in their careers.
morluto/rea★ 357,612
Reverse engineer anything with agents, from app behavior down to native binaries.
anomalyco/opencode★ 219,662
The open source coding agent.
n8n-io/n8n★ 208,252
Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.