CVE-2025-67303 ComfyUI-Manager has an Unprotected Alternate Channel (CWE-420)
Remote attackers can manipulate configuration and critical data in ComfyUI-Manager due to insufficiently protected file storage accessible via the web interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-67303?
CVE-2025-67303 is a high-severity missing authorization vulnerability in n/a, published on 5 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface
Weakness: CWE-420
Which versions are affected by CVE-2025-67303?
3 open source packages ship an affected version, including comfyui-manager. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
comfyui-manager PyPI | All versions | 3.38 |
comfyui-manager PyPI | All versions | 3.38 |
comfyui-manager PyPI | All versions | 3.38 |
Products include Comfy Comfyui-Manager.
How do I fix CVE-2025-67303?
Upgrade comfyui-manager to 3.38 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-67303 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-67303 exists.
Public exploit code: 1 Nuclei template and 6 proofs of concept on GitHub.
Other vulnerabilities in n/a
Sources
Also known as GHSA-95pq-hr8p-f5g7, PYSEC-2026-2422.