CVE-2026-22777

CVE-2026-22777 — ComfyUI-Manager CRLF Injection - RCE with CVE-2025-67303 Severity: Critical CVSS 9.8 Affected: ComfyUI-Manager Code Execution How It Works ComfyUI-Manager exposes a /api/manager/dbmode endpoint that accepts a value query parameter and writes it directly into config.ini using...