Is CVE-2025-67303 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-67303 being exploited in the wild.

How severe is CVE-2025-67303?

High severity, with a CVSS score of 7.5, published 5 January 2026.

Which products and versions are affected?

Comfy-Org ComfyUI < 3.38; comfyui-manager (PyPI) < 3.38, ECOSYSTEM:introduced=0,fixed=3.38.

Is there a fix for CVE-2025-67303?

Yes. comfyui-manager (PyPI): upgrade to 3.38 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2025-67303 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2025-67303?

Check whether you run Comfyui-Manager, Comfy-Org ComfyUI or comfyui-manager (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-67303: Comfy-Org ComfyUI-Manager unprotected alternate channel in configuration directory

Q: Which products and versions are affected?

Comfy-Org ComfyUI < 3.38; comfyui-manager (PyPI) < 3.38, ECOSYSTEM:introduced=0,fixed=3.38.

Q: Is there a fix for CVE-2025-67303?

Yes. comfyui-manager (PyPI): upgrade to 3.38 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2025-67303 attacked?

It is attacked over the network, in a network appliance.

Q: Am I affected by CVE-2025-67303?

Check whether you run Comfyui-Manager, Comfy-Org ComfyUI or comfyui-manager (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-67303 · Severity: high · CVSS 7.5 · Published 2026-01-05

ComfyUI-Manager, a popular extension for managing custom nodes and models in the ComfyUI interface, contained a security flaw where its configuration files were stored in a location accessible via the web. This allowed remote attackers to bypass security controls, modify system settings, and potentially install malicious software components. The vulnerability primarily affects systems configured to be accessible over a network rather than just on a local computer.

Technologies: Comfy-Org ComfyUI. Vendors: Comfy-Org, PyPI.

Quick answers

Is CVE-2025-67303 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-67303 being exploited in the wild.
How severe is CVE-2025-67303?: High severity, with a CVSS score of 7.5, published 5 January 2026.
Which products and versions are affected?: Comfy-Org ComfyUI < 3.38; comfyui-manager (PyPI) < 3.38, ECOSYSTEM:introduced=0,fixed=3.38.
Is there a fix for CVE-2025-67303?: Yes. comfyui-manager (PyPI): upgrade to 3.38 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2025-67303 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2025-67303?: Check whether you run Comfyui-Manager, Comfy-Org ComfyUI or comfyui-manager (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

comfyui-manager (PyPI): upgrade to 3.38 or later
```
pip install "comfyui-manager>=3.38"
```

Technical details

ComfyUI-Manager (prior to v3.38) stored configuration and critical data in the 'user/default/ComfyUI-Manager/' directory, which was exposed via ComfyUI's web APIs without sufficient access control (CWE-420). A remote, unauthenticated attacker could exploit this to modify security levels, tamper with custom node sources, or corrupt system snapshots. The fix involves migrating data to a protected directory ('user/__manager/') that utilizes the ComfyUI System User Protection API (introduced in ComfyUI v0.3.76) to block external web API access. Exploitation is most feasible on systems running with the '--listen 0.0.0.0' flag.

Affected products

Comfy-Org ComfyUI-Manager < 3.38
Comfy-Org ComfyUI < 0.3.76

Identifiers

CVE-2025-67303
GHSA-95pq-hr8p-f5g7
PYSEC-2026-2422

Timeline

2026-01-05: disclosed: Initial CVE assignment and NVD entry
2026-01-11: patched: Version 3.38 released with security migration
2026-06-22: advisory: GitHub Advisory published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.