agentprime: comfy-org-comfyuiEvery new CVE for comfy-org-comfyui.https://agentprime.io/CVE-2026-92816: ComfyUI before 0.30.0 Path Traversal via dataset save nodeshttps://agentprime.io/advisories/CVE-2026-92816/https://agentprime.io/advisories/CVE-2026-92816/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 20:33:01 GMTCVECVE-2026-68771: ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserializationhttps://agentprime.io/advisories/CVE-2026-68771/https://agentprime.io/advisories/CVE-2026-68771/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 21:16:09 GMTCVEcriticalCVE-2026-56673: ComfyUI: Path traversal in LoadImage via the /prompt API allows arbitrary file existence probing and image exfiltrationhttps://agentprime.io/advisories/CVE-2026-56673/https://agentprime.io/advisories/CVE-2026-56673/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 04:46:21 GMTCVECVE-2026-56672: ComfyUI: Stored XSS via /userdata/{file} due to Missing Content-Type Sanitizationhttps://agentprime.io/advisories/CVE-2026-56672/https://agentprime.io/advisories/CVE-2026-56672/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 04:27:18 GMTCVECVE-2026-56671: ComfyUI: Path traversal in /experiment/models/preview allows arbitrary image file readhttps://agentprime.io/advisories/CVE-2026-56671/https://agentprime.io/advisories/CVE-2026-56671/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 04:21:54 GMTCVECVE-2026-56670: ComfyUI: Stored XSS via SVG file upload on the /view endpointhttps://agentprime.io/advisories/CVE-2026-56670/https://agentprime.io/advisories/CVE-2026-56670/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Jul 2026 04:17:43 GMTCVE