PT-2026-2261 · Comfyui · Comfyui-Manager

D0N9 + 1 · Published 2026-01-10 · Updated 2026-03-19 · CVE-2026-22777

Positive Technologies · (AI Summary)

CVSS v3.1

7.5

High

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions ComfyUI-Manager versions prior to 3.39.2 ComfyUI-Manager versions prior to 4.0.5

Description ComfyUI-Manager, an extension for ComfyUI, is susceptible to arbitrary configuration injection. An attacker can inject special characters into HTTP query parameters, allowing them to add arbitrary configuration values to the config.ini file. This can result in security setting tampering or modification of application behavior.

Recommendations Update ComfyUI-Manager to version 3.39.2 or later. Update ComfyUI-Manager to version 4.0.5 or later.

Exploit

Fix

RCE

Weakness Enumeration

CWE-93

Related Identifiers

CVE-2026-22777

GHSA-562R-8445-54R2

Affected Products

Comfyui-Manager

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22777.json · Exploit
• https://github.com/Comfy-Org/ComfyUI-Manager/security/advisories/GHSA-562r-8445-54r2 · Vendor Advisory
• https://github.com/Comfy-Org/ComfyUI-Manager/commit/f4fa394e0f03b013f1068c96cff168ad10bd0410 · Patch
• https://osv.dev/vulnerability/CVE-2026-22777 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22777 · Security Note
• https://osv.dev/vulnerability/GHSA-562r-8445-54r2 · Vendor Advisory
• https://github.com/Comfy-Org/ComfyUI-Manager · Note
• https://github.com/Comfy-Org/ComfyUI-Manager/commit/ef8703a3d7ab4e6ecda8f96e0c5816c23d1cb262 · Note
• https://twitter.com/blackorbird/status/2034568463650541580 · Twitter Post
• https://t.me/cveNotify/151052 · Telegram Post
• https://twitter.com/CVEnew/status/2009891365887320563 · Twitter Post
• https://t.me/cveNotify/148347 · Telegram Post
• https://twitter.com/pulsepatchio/status/2010359227236450625 · Twitter Post
• https://t.me/CVEtracker/41933 · Telegram Post