PUBLISHED
2026-01-05 16:15
MODIFIED
2026-01-05 16:15
EPSS (Prob. Exploit)
1.39%
Top 27.8%
> DESCRIPTION
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> GITHUB SECURITY ADVISORY
GHSA-95pq-hr8p-f5g7
HIGH
ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)
AFFECTED PACKAGES:
PIP / comfyui-manager
< 3.38
Fixed in: 3.38
> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)
AFFECTED PACKAGES:
Unknown / Unknown
125 versions affected
> NUCLEI TEMPLATES
Des templates Nuclei sont disponibles pour scanner cette vulnérabilité.
Usage: nuclei -t http/cves/2025/CVE-2025-67303.yaml -u target.com
> HISTORIQUE DES MODIFICATIONS
Première apparition
05/01/2026 16:15
Source: NVD
📊
ENRICHISSEMENT
19/01/2026 17:38
CVEPROJECT
Champ modifié: CVE Project
Total des modifications: 1
Dernière mise à jour: 9 months ago