Comfyui Segment Anything
Monthly
Code injection in storyicon's comfyui_segment_anything custom node allows arbitrary Python code to run inside the victim's ComfyUI environment when a crafted GroundingDINO configuration is loaded through the SLConfig._file2dict routine in local_groundingdino/util/slconfig.py. Because the loader evaluates config-file contents as Python, an attacker who can place or share a malicious config (for example bundled with a shared workflow or downloaded model set) can execute code with the privileges of the ComfyUI process; the independent assessment rates this AV:L/UI:R with high confidentiality, integrity and availability impact confined to the host running the node. No public exploit was identified at time of analysis, and no vendor-released patch is available - the project was notified through GitHub issue #114 but has not responded.
Code injection in storyicon's comfyui_segment_anything custom node allows arbitrary Python code to run inside the victim's ComfyUI environment when a crafted GroundingDINO configuration is loaded through the SLConfig._file2dict routine in local_groundingdino/util/slconfig.py. Because the loader evaluates config-file contents as Python, an attacker who can place or share a malicious config (for example bundled with a shared workflow or downloaded model set) can execute code with the privileges of the ComfyUI process; the independent assessment rates this AV:L/UI:R with high confidentiality, integrity and availability impact confined to the host running the node. No public exploit was identified at time of analysis, and no vendor-released patch is available - the project was notified through GitHub issue #114 but has not responded.