Advisories · Technology
Comfy-Org ComfyUI.
Every CVE that names Comfy-Org ComfyUI among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
ComfyUI before 0.30.0 Path Traversal via dataset save nodes
- Comfy-Org ComfyUI
- Path traversal
- CVSS 9.3 CriticalCritical · CVSS 9+
ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization
- Comfy-Org ComfyUI
- Insecure deserialization
- CVSS 7.5 High
ComfyUI: Path traversal in LoadImage via the /prompt API allows arbitrary file existence probing and image exfiltration
- Comfy-Org ComfyUI
- Path traversal
- CVSS 8.2 High
ComfyUI: Stored XSS via /userdata/{file} due to Missing Content-Type Sanitization
- Comfy-Org ComfyUI
- Cross-site scripting (XSS)
- CVSS 7.5 High
ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file read
- Comfy-Org ComfyUI
- Path traversal
- CVSS 8.2 High
ComfyUI: Stored XSS via SVG file upload on the /view endpoint
- Comfy-Org ComfyUI
- Cross-site scripting (XSS)