Comfy-Org vulnerabilities
We track 7 vulnerabilities in Comfy-Org products across 2 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
Latest Comfy-Org vulnerabilities
- 7.8 High severity
ComfyUI: Improper Limitation of a Pathname to a Restricted Directory
ComfyUI before 0.30.0 fails to sanitize folder_name input in dataset save nodes, allowing attackers to write files to arbitrary paths outside the output directory. Attackers can load a crafted workflow that writes attacker-controlled content to arbitrary locat
- 9.8 Critical severity
ComfyUI: Deserialization of Untrusted Data
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can
- 7.5 High severity
ComfyUI: Improper Limitation of a Pathname to a Restricted Directory
ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folder_paths.get_annotated_filepath and exists_annotated_filepath join workflow-controlled annotated filenames to a base directory without a containmen
- 8.2 High severity
ComfyUI: Improper Neutralization of Input During Web Page Generation
ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-controlled HTML and SVG files with extension-derived content types, allowing stored cross-site scripting in the ComfyUI origin and access to browse
- 7.5 High severity
ComfyUI: Improper Limitation of a Pathname to a Restricted Directory
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, get_model_preview in app/model_manager.py joins an unrestricted filename route capture to a selected model directory without a containment check, allowing
- 8.2 High severity
ComfyUI: Improper Neutralization of Input During Web Page Generation
ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, the /view endpoint served uploaded SVG files inline because image/svg+xml and related XML content types were absent from the dangerous-content-type handlin
- 7.5 High severity
ComfyUI-Manager: Improper Neutralization of CRLF Sequences
ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead t