CVE-2025-67303High· 7.5▾ MidnightPoC availableComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 41.3 · likelihood 0.3 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 2 sources. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Jul 4.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via GHSA
1.4%
1.4% → 1.4%
5 GitHub repos · Nuclei ×1
An Unprotected Alternate Channel (CWE-420) vulnerability was discovered in ComfyUI-Manager versions prior to 3.38.
In affected versions, ComfyUI-Manager stored its configuration in the user/default/ComfyUI-Manager/ directory, which was accessible via ComfyUI's web APIs without proper access control. This unprotected alternate channel allowed remote attackers to read and manipulate configuration files and critical data through the web interface.
An attacker exploiting this vulnerability could:
| Configuration | Risk Level |
|---|---|
Systems running with --listen 0.0.0.0 (externally exposed) | HIGH |
| Systems behind reverse proxy without proper access control | MEDIUM |
| Local-only installations (default, localhost only) | NOT AFFECTED |
This issue has been patched in ComfyUI-Manager version 3.38.
| Component | Minimum Version | Notes |
|---|---|---|
| ComfyUI | v0.3.76+ | Required for System User Protection API |
| ComfyUI-Manager | v3.38+ | Contains the security fix |
user/default/ComfyUI-Manager/ to protected user/__manager/__manager/ directory leverages ComfyUI's System User Protection API, which blocks external web API access.legacy-manager-backup/ with startup reminders until manually deletedaaed1dcIf immediate upgrade is not possible, apply the following mitigations:
| Mitigation | Effectiveness | Effort |
|---|---|---|
Remove --listen 0.0.0.0 flag (use localhost only) | HIGH | Low |
| Implement firewall rules to block external access to ComfyUI ports | HIGH | Medium |
| Use reverse proxy with authentication (e.g., nginx + basic auth) | HIGH | Medium |
| Restrict network access to trusted IPs only | MEDIUM | Low |
Note: These are temporary mitigations. Upgrading to v3.38+ is strongly recommended.
This vulnerability was reported by Ricter Zheng (ricterzheng / 郑杜涛) from Tencent Xuanwu Lab [email protected]
comfyui-manager < 3.38Upgrade to a patched release:
comfyui-manager 3.38Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2023-28840High· 7.5Moby is an open source container framework developed by Docker Inc
CVE-2026-61909Low· 3.5An issue was discovered in Cyrus IMAP before 3.12.4
CVE-2023-28842Medium· 6.8moby: Encrypted overlay network with a single endpoint is unauthenticated (CVE-2023-28842)
CVE-2026-77639Medium· 5.3Tor before 0.4.9.9 was prone to a compression bomb bypass where an attacker could concatenate many gzip or zlib sub-streams, each just under the per-stream detection threshold, to avoid the compression bomb check entirely
CVE-2026-40435Medium· 5.3When configured, IP-based access restrictions for httpd do not cover all endpoints, which may allow connections from blocked addresses. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.