# CVE-2025-67303: Comfy-Org ComfyUI-Manager unprotected alternate channel in configuration directory

Source: https://junglewise.ai/threats/cve-2025-67303-comfy-org-comfyui-manager-unprotected-alternate-channel-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-01-05. Updated: 2026-06-22  
License: CC BY 4.0 with a link back

CVE-2025-67303 · Severity: high · CVSS 7.5 · Published 2026-01-05

ComfyUI-Manager, a popular extension for managing custom nodes and models in the ComfyUI interface, contained a security flaw where its configuration files were stored in a location accessible via the web. This allowed remote attackers to bypass security controls, modify system settings, and potentially install malicious software components. The vulnerability primarily affects systems configured to be accessible over a network rather than just on a local computer.

Technologies: [Comfy-Org ComfyUI](https://junglewise.ai/threats/technologies/comfyui). Vendors: [Comfy-Org](https://junglewise.ai/threats/vendors/comfy-org), [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2025-67303 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-67303 being exploited in the wild.

**How severe is CVE-2025-67303?** High severity, with a CVSS score of 7.5, published 5 January 2026.

**Which products and versions are affected?** Comfy-Org ComfyUI < 3.38; comfyui-manager (PyPI) < 3.38, ECOSYSTEM:introduced=0,fixed=3.38.

**Is there a fix for CVE-2025-67303?** Yes. comfyui-manager (PyPI): upgrade to 3.38 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2025-67303 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2025-67303?** Check whether you run Comfyui-Manager, Comfy-Org ComfyUI or comfyui-manager (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- comfyui-manager (PyPI): upgrade to 3.38 or later

  ```sh
  pip install "comfyui-manager>=3.38"
  ```


## Technical details

ComfyUI-Manager (prior to v3.38) stored configuration and critical data in the 'user/default/ComfyUI-Manager/' directory, which was exposed via ComfyUI's web APIs without sufficient access control (CWE-420). A remote, unauthenticated attacker could exploit this to modify security levels, tamper with custom node sources, or corrupt system snapshots. The fix involves migrating data to a protected directory ('user/__manager/') that utilizes the ComfyUI System User Protection API (introduced in ComfyUI v0.3.76) to block external web API access. Exploitation is most feasible on systems running with the '--listen 0.0.0.0' flag.

## Affected products

- Comfy-Org ComfyUI-Manager < 3.38
- Comfy-Org ComfyUI < 0.3.76

## Identifiers

- CVE-2025-67303
- GHSA-95pq-hr8p-f5g7
- PYSEC-2026-2422

## Timeline

- 2026-01-05: disclosed: Initial CVE assignment and NVD entry
- 2026-01-11: patched: Version 3.38 released with security migration
- 2026-06-22: advisory: GitHub Advisory published

## References

- [https://github.com/Comfy-Org/ComfyUI-Manager/security/advisories/GHSA-95pq-hr8p-f5g7](https://github.com/Comfy-Org/ComfyUI-Manager/security/advisories/GHSA-95pq-hr8p-f5g7)
- [https://github.com/Comfy-Org/ComfyUI-Manager/pull/2338/commits/e44c5cef58fb4973670b86433b9d24d077b44a26](https://github.com/Comfy-Org/ComfyUI-Manager/pull/2338/commits/e44c5cef58fb4973670b86433b9d24d077b44a26)
- [https://github.com/Comfy-Org/ComfyUI-Manager/blob/main/docs/en/v3.38-userdata-security-migration.md](https://github.com/Comfy-Org/ComfyUI-Manager/blob/main/docs/en/v3.38-userdata-security-migration.md)
- [https://api.github.com/repos/Comfy-Org/ComfyUI-Manager/security-advisories/GHSA-95pq-hr8p-f5g7](https://api.github.com/repos/Comfy-Org/ComfyUI-Manager/security-advisories/GHSA-95pq-hr8p-f5g7)

## Related threats

- [ComfyUI path traversal in dataset save nodes](https://junglewise.ai/threats/cve-2026-92816-comfyui-path-traversal-in-dataset-save-nodes)
- [Comfy-Org ComfyUI unsafe deserialization in LoadTrainingDataset node](https://junglewise.ai/threats/cve-2026-68771-comfy-org-comfyui-unsafe-deserialization-in-loadtrainingdataset)
- [ComfyUI path traversal in LoadImage and media nodes](https://junglewise.ai/threats/cve-2026-56673-comfyui-path-traversal-in-loadimage-and-media-nodes)
- [Comfy-Org ComfyUI stored XSS in userdata endpoint](https://junglewise.ai/threats/cve-2026-56672-comfy-org-comfyui-stored-xss-in-userdata-endpoint)
- [Comfy-Org ComfyUI path traversal in model preview endpoint](https://junglewise.ai/threats/cve-2026-56671-comfy-org-comfyui-path-traversal-in-model-preview-endpoint)