A path traversal flaw in ComfyUI allows unauthenticated attackers to potentially read unauthorized files on the server, posing a high risk to data confidentiality.

This is a path traversal vulnerability (CWE-22) that allows an unauthenticated attacker to manipulate file paths. By providing crafted input, an attacker can escape the intended directory structure to access sensitive files.

This vulnerability carries a CVSS score of 7.5, indicating a high risk of sensitive data exposure. Unauthorized access to server files can result in the compromise of credentials, configuration secrets, or other intellectual property, potentially leading to broader system exploitation or data breaches.

Immediate Action: Update ComfyUI to version 0.28.0 or later to resolve the underlying path traversal issue.

Proactive Monitoring: Monitor server logs for suspicious requests that attempt to traverse directories, such as paths containing multiple parent directory references.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter and block malicious requests that attempt to access files outside of the authorized application directories.

Public Exploit Available: Unknown

Given the ease with which this vulnerability can be exploited, immediate patching is essential. Organizations using ComfyUI should ensure that version 0.28.0 is deployed across all instances to mitigate the risk of unauthorized file system access.