EUVD-2026-23739
GHSA-643x-95vv-2wf6
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
9DescriptionCVE.org
A vulnerability was found in ComfyUI up to 0.13.0. Affected by this issue is some unknown functionality of the file server.py of the component View Endpoint. Performing a manipulation results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Cross-site scripting (XSS) in ComfyUI up to version 0.13.0 allows authenticated remote attackers to inject malicious scripts through the View Endpoint in server.py, affecting user integrity with publicly available exploit code. The vulnerability requires user interaction (UI:R) and authenticated access (PR:L), limiting its severity despite network accessibility. ComfyUI's vendor has not responded to early disclosure attempts, and the exploit has been published on GitHub, making this a low-CVSS but publicly weaponized vulnerability affecting an AI image generation framework.
Technical ContextAI
ComfyUI is a node-based UI for Stable Diffusion that provides a web-based server interface (server.py). The vulnerability exists in the View Endpoint component, which handles HTTP requests and responses. The root cause is classified under CWE-79 (Improper Neutralization of Input During Web Page Generation), indicating insufficient input sanitization or output encoding. The attacker can manipulate parameters or data passed to the View Endpoint, causing unsanitized content to be reflected or stored in the HTML response. When a victim user views the affected page in their browser, the injected JavaScript executes in their security context, potentially allowing session hijacking, credential theft, or actions performed on behalf of the victim user within the ComfyUI application.
RemediationAI
No vendor-released patch has been identified at time of analysis, as ComfyUI's maintainers did not respond to early disclosure. Immediate mitigations include: (1) Upgrade to a version newer than 0.13.0 if available (check the ComfyUI GitHub repository for releases post-disclosure); (2) If upgrade is not possible, restrict network access to the ComfyUI server by placing it behind a reverse proxy or firewall that only allows trusted IP addresses, reducing the attack surface despite the NV:N vector; (3) Implement strict input validation and output encoding in server.py's View Endpoint by escaping or sanitizing all user-supplied input before rendering it in HTML responses (e.g., using HTML entity encoding for user input); (4) Disable or restrict access to the View Endpoint feature if it is non-critical to your workflow; (5) Run ComfyUI in single-user mode or trusted environments only, eliminating the multi-user attack scenario where one user's script could affect another's session. Trade-offs: Network restriction may impact remote access usability; disabling the View Endpoint may limit functionality; patching server.py requires code modification skills and testing. Monitor the ComfyUI GitHub repository and VulDB for vendor updates.
comfyanonymous/comfyui version v0.2.4 suffers from a non-blind Server-Side Request Forgery (SSRF) vulnerability. Rated h
A stored cross-site scripting (XSS) vulnerability exists in comfyanonymous/comfyui version 0.2.2 and possibly earlier. R
Remote code execution in ComfyUI v0.23.0 (and all prior 0.x releases) lets unauthenticated attackers run arbitrary Pytho
Stored cross-site scripting in ComfyUI before 0.28.0 lets an attacker upload a malicious SVG that the /view endpoint ser
Stored cross-site scripting in ComfyUI (Comfy-Org) before 0.28.0 lets an attacker upload HTML or SVG to the per-user use
Unauthenticated information disclosure in ComfyUI (comfy-org/comfyui) before 0.28.0 lets remote attackers read arbitrary
Path traversal arbitrary file read in ComfyUI (comfy-org) before 0.28.0 lets remote unauthenticated attackers probe arbi
Path traversal in ComfyUI up to version 0.13.0 allows authenticated remote attackers to read arbitrary files on the serv
Path traversal in ComfyUI up to version 0.13.0 allows authenticated remote attackers to read arbitrary files via manipul
Cross-site request forgery (CSRF) in ComfyUI up to version 0.13.0 allows unauthenticated remote attackers to modify appl
Stored cross-site scripting (XSS) in ComfyUI's userdata endpoint (getuserdata function in app/user_manager.py) allows au
A CSRF vulnerability exists in comfyanonymous/comfyui versions up to v0.2.2. Rated medium severity (CVSS 6.5), this vuln
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today