A vulnerability in ComfyUI-Manager allows unauthenticated remote attackers to manipulate critical configuration data by accessing insecurely stored files via the web interface.

This is an improper access control vulnerability where the application stores sensitive configuration files in a web-accessible directory, allowing unauthenticated remote attackers to modify critical system data.

The ability for an attacker to modify the configuration of ComfyUI-Manager poses a significant risk to system integrity and data security. With a CVSS score of 7.5, this high-severity flaw could lead to unauthorized system behavior, potential data exfiltration, or further compromise of the underlying infrastructure hosting the application.

Immediate Action: Update the ComfyUI-Manager package to version 3.38 or later immediately to apply the necessary security migrations and access control patches.

Proactive Monitoring: Review web server access logs for unusual requests targeting configuration files or paths within the ComfyUI-Manager directory structure.

Compensating Controls: Implement a Web Application Firewall (WAF) or restrict network access to the management interface to ensure that only authorized IP addresses can interact with the application.

Public Exploit Available: Yes — multiple public proof-of-concept repositories are available on GitHub.

Given the high CVSS score and the public availability of proof-of-concept exploit code, this vulnerability presents a clear and present danger to affected environments. Administrators must prioritize updating to version 3.38 to ensure the security migration is applied, as failure to do so leaves the application open to configuration tampering by unauthenticated remote actors.