7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-67303

CVE-2025-67303: ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-67303

CVE-2025-67303:

7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

SSVC / BOD 26-04 ↗

Exploitation NoneAutomatable YesTech Impact Partial

Select your environment

→SSVCDeferfix on upgrade

Runtime reachability resolves your actual outcome.Book a demo

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
comfyui-manager	pip	< 3.38	3.38

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, CWE-420: Unprotected Alternate Channel, stems from ComfyUI-Manager storing its configuration and data files in a publicly accessible directory (user/default/ComfyUI-Manager/) within the ComfyUI framework. This allowed unauthenticated remote attackers to read and write sensitive files via ComfyUI's web API, especially when the server was exposed to the network (e.g., using --listen 0.0.0.0).

The analysis of the patch commit e44c5cef58fb4973670b86433b9d24d077b44a26 reveals that the vulnerability is not in a single flawed function but in the overall file management strategy. The identified functions are those that directly interact with the compromised file storage location, making them the key indicators that would appear in a runtime profile during exploitation.

manager_core.update_user_directory: This function sets the stage for the vulnerability by defining the unprotected directory as the location for all manager-related files.
manager_core.get_config: This function consumes the configuration from the unprotected path. An attacker could modify config.ini to lower the security level, and this function would trust and apply that malicious setting, disabling security controls across the application.
prestartup_script.execute_startup_script: This represents the most critical impact, allowing remote code execution. An attacker could write a malicious script to the startup-scripts directory, which this function would then execute on the next startup.

The patch remediates this by migrating the files to a new, protected directory (user/__manager/) that is inaccessible via the web API, thanks to a new feature in the underlying ComfyUI framework. The patch also includes several fallback protections, such as forcing a 'strong' security level and blocking startup scripts if an older, insecure version of ComfyUI is detected.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.