Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:47 p.m.•22 views

CVE-2026-6591

A flaw has been found in ComfyUI up to 0.13.0. Affected is the function folderpaths.getannotatedfilepath of the file folderpaths.py of the component LoadImage Node. This manipulation of the argument Name causes path traversal. Remote exploitation of the attack is possible. The exploit has been...

5.3CVSS5AI score0.00517EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/20 1:00 a.m.•18 views

EUVD-2026-23735

A flaw has been found in ComfyUI up to 0.13.0. Affected is the function folderpaths.getannotatedfilepath of the file folderpaths.py of the component LoadImage Node. This manipulation of the argument Name causes path traversal. Remote exploitation of the attack is possible. The exploit has been...

5.3CVSS5.2AI score0.00517EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/20 1:00 a.m.•9 views

CVE-2026-6591 ComfyUI LoadImage Node folder_paths.py folder_paths.get_annotated_filepath path traversal

A flaw has been found in ComfyUI up to 0.13.0. Affected is the function folderpaths.getannotatedfilepath of the file folderpaths.py of the component LoadImage Node. This manipulation of the argument Name causes path traversal. Remote exploitation of the attack is possible. The exploit has been...

5.3CVSS5AI score0.00517EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/04/20 1:00 a.m.•50 views

CVE-2026-6591 ComfyUI LoadImage Node folder_paths.py folder_paths.get_annotated_filepath path traversal

A flaw has been found in ComfyUI up to 0.13.0. Affected is the function folderpaths.getannotatedfilepath of the file folderpaths.py of the component LoadImage Node. This manipulation of the argument Name causes path traversal. Remote exploitation of the attack is possible. The exploit has been...

5.3CVSS0.00517EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/20 1:00 a.m.•45 views

CVE-2026-6591

ComfyUI up to 0.13.0 is affected by a path traversal in the LoadImage Node’s folder_paths.get_annotated_filepath (folder_paths.py). The vulnerability arises from manipulating the Name argument, enabling remote exploitation. An exploit has been published; vendor was contacted but did not respond. ...

5.3CVSS5AI score0.00517EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/04/20 12:00 a.m.•22 views

ComfyUI 安全漏洞

ComfyUI is the most powerful and modular diffusion model GUI and backend developed by comfyanonymous individuals. Versions of ComfyUI prior to 0.13.0 contain security vulnerabilities, which stem from improper handling of parameter names in the folderpaths.getannotatedfilepath function within fold...

5.3CVSS5.8AI score0.00517EPSS
SaveExploits0References1
Rows per page
Query Builder