| Package | Affected versions | Patched versions |
|---|---|---|
| comfy-cli | ≥ 4.0.0, < 4.0.5< 3.39.2 | 4.0.53.39.2 |
| comfyui-manager | ≥ 4.0.3, < 4.0.5< 3.39.2 | 4.0.53.39.2 |
Vulnerability Type: CRLF Injection via ConfigParser
An attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior.
Affected Users: Users running ComfyUI-Manager in environments where ComfyUI is configured with the --listen option to allow remote access.
CVSS Score: 7.5 (High)
Fixed in the following versions:
Sanitization logic was added to the write_config() function to remove CRLF and NULL characters from all string values.
If upgrading is not possible:
--listen optionThis vulnerability was reported by:
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free