cve-2025-67303

{
  "cvss": 7.5,
  "datePublished": "2026-01-05T16:15:42.977",
  "dateUpdated": "2026-11-04T22:10:00.210",
  "description": "An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface",
  "id": "CVE-2025-67303",
  "raw": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "n/a",
            "vendor": "n/a",
            "versions": [
              {
                "status": "affected",
                "version": "n/a"
              }
            ]
          }
        ],
        "source": "cve@mitre.org"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:a:comfy:comfyui-manager:*:*:*:*:*:*:*:*",
                "matchCriteriaId": "A2BEDC7B-32BB-4C47-81B5-4EC4357B3E36",
                "versionEndExcluding": "3.38",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface"
      },
      {
        "lang": "es",
        "value": "Una vulnerabilidad en ComfyUI-Manager anterior a la versión 3.38 permitía a atacantes remotos manipular potencialmente su configuración y datos críticos. Esto se debía a que la aplicación almacenaba sus archivos en una ubicación insuficientemente protegida que era accesible a través de la interfaz web."
      }
    ],
    "id": "CVE-2025-67303",
    "lastModified": "2026-11-04T22:10:00.210",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6,
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-67303",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "yes"
              },
              {
                "technicalImpact": "partial"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2026-01-05T19:10:44.763823Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2026-01-05T16:15:42.977",
    "references": [
      {
        "source": "cve@mitre.org",
        "tags": [
          "Exploit",
          "Third Party Advisory"
        ],
        "url": "https://github.com/Comfy-Org/ComfyUI-Manager/blob/main/docs/en/v3.38-userdata-security-migration.md"
      },
      {
        "source": "cve@mitre.org",
        "tags": [
          "Patch"
        ],
        "url": "https://github.com/Comfy-Org/ComfyUI-Manager/pull/2338/commits/e44c5cef58fb4973670b86433b9d24d077b44a26"
      }
    ],
    "sourceIdentifier": "cve@mitre.org",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-420"
          }
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ]
  },
  "severity": "HIGH",
  "source": "nvd",
  "title": "An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuratio..."
}