CVE-2026-92816: ComfyUI before 0.30.0 Path Traversal via dataset save nodes
ComfyUI before 0.30.0 fails to sanitize foldername input in dataset save nodes, allowing attackers to write files to arbitrary paths outside the output directory. Attackers can load a crafted workflow that writes attacker-controlled content to arbitrary locations, enabling code execution through modified startup files or package initializers.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ComfyUIto a version that resolves this vulnerability.Fixed in 0.30.0
Event History
Frequently Asked Questions
Who is exposed to exploitation?
ComfyUI installations before 0.30.0 are exposed when a user loads a crafted workflow containing affected dataset save nodes. The attack requires local access and user interaction, as reflected by the AV:L and UI:R vector.
What does an attacker need to do to exploit this issue?
An attacker needs to provide a crafted workflow that supplies a malicious folder_name value to a dataset save node. This can cause attacker-controlled content to be written outside ComfyUI's intended output directory.
What is the practical impact of a successful exploit?
Arbitrary file writes can be used to modify startup files or package initializers. This can result in code execution with the privileges of the user running ComfyUI.
What version resolves the issue?
Upgrade ComfyUI to version 0.30.0 or later. Versions before 0.30.0 are identified as affected.