7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-2hc9-cc65-xwj8

GHSA-2hc9-cc65-xwj8: Duplicate Advisory: ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-95pq-hr8p-f5g7. This link is maintained to preserve external references.

Original Description

An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-2hc9-cc65-xwj8

GHSA-2hc9-cc65-xwj8:

7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
comfyui-manager	pip	< 3.38	3.38

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability, CWE-420 (Unprotected Alternate Channel), exists because ComfyUI-Manager stored its data, configuration, and executable scripts in the user/default/ComfyUI-Manager/ directory. In older versions of the parent application, ComfyUI, the entire user/default/ directory was served by the internal web server and accessible to remote users if ComfyUI was started with the --listen flag. This allowed an unauthenticated remote attacker to read and write files in the manager's data directory, leading to several security risks, including remote code execution.

The primary exploitation vector involves an attacker writing malicious commands to startup-scripts/install-scripts.txt. The prestartup_script.execute_startup_script function would then read and execute these commands the next time ComfyUI was started. Another vector involves modifying config.ini via the exposed directory to lower the security_level, which would disable security checks and allow the attacker to use the manager's own features to install malicious custom nodes.

The patch addresses this vulnerability by migrating the manager's data to a new, protected user/__manager/ directory, which is not served by the web server. This is achieved through a new manager_migration.py module. For systems running older, vulnerable versions of ComfyUI that do not support this protected directory, the patch implements several security hardening measures, such as forcing the security level to its highest setting (strong) and disabling the execution of startup scripts to mitigate the risk.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.