https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T11:52:51.451733+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-67303 CVE-2025-67303 2026-10-04T11:52:51.453552+00:00

An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface

 https://cve.radiocsirt.org/vuln/ghsa-95pq-hr8p-f5g7 GHSA-95pq-hr8p-f5g7 — ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420) 2026-10-04T11:52:51.453606+00:00

Affected: PyPI: comfyui-manager

### Impact

An **Unprotected Alternate Channel (CWE-420)** vulnerability was discovered in ComfyUI-Manager versions prior to 3.38.

#### Vulnerability Details

In affected versions, ComfyUI-Manager stored its configuration in the `user/default/ComfyUI-Manager/` directory, which was accessible via ComfyUI's web APIs without proper access control. This unprotected alternate channel allowed remote attackers to read and manipulate configuration files and critical data through the web interface.

#### Potential Attack Scenarios

An attacker exploiting this vulnerability could: - **Modify security settings**: Lower the security level from "strong" to "weak" to enable more dangerous operations - **Tamper with custom node sources**: Add malicious custom node repositories - **Manipulate snapshot data**: Corrupt or alter system snapshots - **Change manager behavior**: Alter various manager configuration settings

#### Affected Configurations

| Configuration | Risk Level | |---------------|------------| | Systems running with `--listen 0.0.0.0` (externally exposed) | **HIGH** | | Systems behind reverse proxy without proper access control | **MEDIUM** | | Local-only installations (default, localhost only) | **NOT AFFECTED** |

---

### Patches

This issue has been patched in **ComfyUI-Manager version 3.38**.

#### Requirements

| Component | Minimum Version | Notes | |-----------|-----------------|-------| | ComfyUI | v0.3.76+ | Required for System User Protection API | | ComfyUI-Manag…