EUVD-2026-23737Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
9DescriptionCVE.org
A vulnerability has been found in ComfyUI up to 0.13.0. Affected by this vulnerability is the function getuserdata of the file app/user_manager.py of the component userdata Endpoint. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
AnalysisAI
Stored cross-site scripting (XSS) in ComfyUI's userdata endpoint (getuserdata function in app/user_manager.py) allows authenticated attackers to inject malicious scripts that execute in other users' browsers. Affected versions range from 0.1 through 0.13.0. The vulnerability requires user interaction (UI:R) and authenticated access (PR:L), limiting real-world impact, but publicly available exploit code exists and the vendor has not responded to disclosure.
Technical ContextAI
ComfyUI is a node-based UI for Stable Diffusion that manages user data via a REST endpoint. The userdata endpoint's getuserdata function fails to sanitize user-supplied input before reflecting it in HTTP responses, creating a stored XSS vulnerability (CWE-79: Improper Neutralization of Input During Web Page Generation). The attack surface is the app/user_manager.py component, specifically the endpoint handling user profile or preference data. Because the CVSS vector specifies PR:L (requires login) and UI:R (requires user interaction to trigger the payload), exploitation is limited to authenticated users and requires a victim to view the malicious data in their own session or click a crafted link.
RemediationAI
No vendor-released patch identified at time of analysis - the vendor was contacted early but did not respond. Immediate remediation options include: (1) Upgrade to a patched version if available (verify with upstream project or official release channels for versions after 0.13.0); (2) Apply input validation and output encoding to the getuserdata function in app/user_manager.py - specifically, HTML-encode or sanitize all user-controlled data before inclusion in responses; (3) Implement Content Security Policy (CSP) headers with script-src 'self' to restrict inline script execution; (4) Restrict userdata endpoint access via network segmentation or authentication gateway if ComfyUI is exposed to untrusted networks; (5) For high-risk deployments, disable the userdata endpoint or user profile features if operationally feasible. Monitor upstream ComfyUI repository and issue trackers for security patches. Refer to VulDB (vuldb.com/vuln/358227) for updates.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today