Description
An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 6 repositories
-
Si13NTTT/CVE-2026-22777 ★ 0 · Sep 28, 2026
CVE-2026-22777 ComfyUI-Manager CRLF Injection leading to RCE chained with CVE-2025-67303
-
jcaz2378/ComfyUIrce ★ 0 · May 13, 2026
Git CVE-2025-67303 payload
-
materaj2/exploit_cve_2025_67303 ★ 0 · Jan 24, 2026
Create PoC for CVE-2025-67303
-
ExploreUnknowed/CVE-2025-67303 ★ 0 · Jan 22, 2026
-
maybe-O/CVE-2025-67303 ★ 0 · Jan 14, 2026
-
joker-xiaoyan/CVE-2025-67303 ★ 0 · Jan 9, 2026
test
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- ComfyUI-Manager < 3.38 - Configuration Overwrite http/cves/2025/CVE-2025-67303.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | comfyui-manager | < 3.38 | 3.38 | GHSA-95pq-hr8p-f5g7 |