[Bug]: Unauthenticated /sdapi/v1/cmd-flags Endpoint Exposes Gradio Auth Credentials

[geo-chen]

Checklist

• The issue exists after disabling all extensions
• The issue exists on a clean installation of webui
• The issue is caused by an extension, but I believe it is caused by a bug in the webui
• The issue exists in the current version of the webui
• The issue has not been reported before recently
• The issue has been reported before but has not been fixed yet

What happened?

Hi, is there a place I can report details of a security vuln privately?

Steps to reproduce the problem

What should have happened?

What browsers do you use to access the UI ?

No response

Sysinfo

Console logs

-

Additional information

No response