Executive brief
ComfyUI is a popular AI image generation and workflow interface that users load and execute workflows through. A vulnerability in the dataset save functionality allows attackers to craft malicious workflows that write files to arbitrary locations outside the intended output directory, potentially enabling code execution through modification of Python startup files or package initialization code.
Technical details
The vulnerability is a path traversal flaw in the dataset save nodes (comfy_extras/nodes_dataset.py) where the folder_name input parameter is not properly sanitized before being used in file write operations. Attackers can load a crafted workflow containing path traversal sequences (e.g., "../") to escape the output directory and write attacker-controlled content to arbitrary filesystem locations. No authentication is required—the attack is delivered via workflow file loading. An attacker can achieve remote code execution by writing malicious Python files to directories that are imported at application startup, such as package initializers or hook scripts.
Affected products
- Comfy-Org ComfyUI before 0.30.0
Timeline
- 2026-09-16: disclosed
- 2026-09-16: patched: Fix available in version 0.30.0 and later