What’s Vulnerable › Products

ComfyUI vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your ComfyUI version is affected

Latest ComfyUI vulnerabilities

• CVE-2026-6593 — ComfyUI View Endpoint server.py cross site scripting (CVSS 3.5)
• CVE-2026-6592 — ComfyUI userdata Endpoint user_manager.py getuserdata cross site scripting (CVSS 3.5)
• CVE-2026-6591 — ComfyUI LoadImage Node folder_paths.py folder_paths.get_annotated_filepath path traversal (CVSS 4.3)
• CVE-2026-6590 — ComfyUI Model Preview Endpoint model_manager.py get_model_preview path traversal (CVSS 4.3)
• CVE-2026-6589 — ComfyUI server.py create_origin_only_middleware cross-site request forgery (CVSS 4.3)