Known Vulnerabilities for ComfyUI by Comfy-Org
Listed below are 7 of the newest known vulnerabilities associated with "ComfyUI" by "Comfy-Org".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-68771 json | ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated ... | Not Provided | 2026-07-31 | 2026-08-03 |
| CVE-2026-56673 json | ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folder_paths.get... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-56672 json | ComfyUI is a node-based diffusion model GUI, API, and backend. Prior to 0.28.0, GET /userdata/{file} served user-controlled H... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-56671 json | ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, get_model_preview in... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-56670 json | ComfyUI is a modular diffusion model GUI, api and backend with a graph/nodes interface. Prior to 0.28.0, the /view endpoint s... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-19371 json | A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src... | Not Provided | 2026-08-09 | 2026-08-13 |
| CVE-2026-13493 json | A flaw has been found in AIDC-AI ComfyUI-Copilot up to 2.0.28. This issue affects some unknown processing of the file backend... | Not Provided | 2026-06-28 | 2026-06-29 |