CyberRota Analysis
AI-GeneratedComfyUI versions prior to 0.30.0 are vulnerable due to inadequate sanitization of the folder_name input in dataset save nodes, allowing attackers to write files to arbitrary paths outside the designated output directory. This vulnerability can lead to code execution by enabling the execution of malicious content through modified startup files or package initializers. Organizations using ComfyUI should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ComfyUI before 0.30.0 fails to sanitize folder_name input in dataset save nodes, allowing attackers to write files to arbitrary paths outside the output directory. Attackers can load a crafted workflow that writes attacker-controlled content to arbitrary locations, enabling code execution through modified startup files or package initializers.