| शीर्षक | ComfyUI ComfyUI-Manager <= v3.35.0 9.8 (CRITICAL) |
|---|
| विवरण | ComfyUI-Manager prior to v3.38.0 contains a critical authentication bypass vulnerability that allows unauthenticated attackers to achieve Remote Code Execution (RCE) on the underlying server.
The vulnerability arises from an insecure file path configuration where the Manager stores configuration files in the `user/default/ComfyUI-Manager/` directory. The `default` user directory is accessible via the `/userdata` API endpoint without authentication. An attacker can:
1. Upload a malicious snapshot file containing arbitrary Git repository URLs
2. Trigger the snapshot restoration process
3. Upon ComfyUI restart, the Manager automatically clones the specified Git repository and executes any `install.py` script found within |
|---|
| स्रोत | ⚠️ https://github.com/nn0nkey/nn0nkey/blob/main/comfy.md |
|---|
| उपयोगकर्ता | nn0nkey (UID 74287) |
|---|
| सबमिशन | 09/01/2026 10:14 AM (9 महीनों पहले) |
|---|
| संयम | 11/01/2026 10:38 AM (2 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 339553 [ComfyUI-Manager तक 3.37 Web Interface अधिकार वृद्धि] |
|---|
| अंक | 0 |
|---|