A path traversal vulnerability in ComfyUI allows unauthenticated remote attackers to read sensitive files from the underlying server.

This is a path traversal vulnerability (CWE-22) residing in the application's file handling mechanism. An unauthenticated attacker can exploit this to bypass directory restrictions and access arbitrary files on the filesystem.

Successful exploitation of this vulnerability could lead to the unauthorized disclosure of sensitive configuration files, environment variables, or other proprietary data stored on the server. With a CVSS score of 7.5, the high severity reflects the potential for significant information leakage without requiring user interaction or authentication.

Immediate Action: Upgrade ComfyUI to version 0.28.0 or later to apply the necessary security patches.

Proactive Monitoring: Review web server and application logs for unusual file request patterns, specifically those containing directory traversal sequences such as double dots (..).

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block requests containing path traversal sequences to prevent exploitation attempts until the update is applied.

Public Exploit Available: Unknown

The vulnerability poses a significant risk to the confidentiality of the host system. Administrators should prioritize updating to version 0.28.0 immediately to eliminate this path traversal risk and protect against potential unauthorized file access.