Loading story…
ComfyUI patched a stored cross-site scripting vulnerability tracked as CVE-2026-56670 that allowed malicious SVG files uploaded to the platform to execute script in the application's origin when later rendered through the /view endpoint. The flaw affected versions prior to 0.28.0 because uploaded SVG content was served inline and image/svg+xml and related XML content types were not included in dangerous content-type handling, creating a path for attacker-controlled content to run in a victim's browser.
The issue is classified as CWE-79 and carries a CVSS v3.1 vector of AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N, indicating high confidentiality impact with user interaction required. ComfyUI addressed the bug in version 0.28.0, whose release notes also state that the update includes fixes for four vulnerabilities under GHSA-779p-m5rp-r4h4, alongside other security and stability improvements such as masking authorization headers in logs for Partner Nodes.
See affected versions and whether adversaries are exploiting it.
1 event from the most recent confirmed update back to the earliest known activity.
ComfyUI released version 0.28.0, which included a security fix bundle referenced by advisory GHSA-779p-m5rp-r4h4. This release fixed CVE-2026-56670, a stored XSS issue affecting versions prior to 0.28.0.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
ComfyUI disclosed and patched **CVE-2026-56672**, a high-severity stored cross-site scripting flaw affecting versions prior to `0.28.0`. The bug allowed attacker-controlled HTML or SVG files uploaded through `/userdata/{file}` to be served back with extension-derived MIME types, causing script execution in the ComfyUI origin when a victim opened the file URL. A successful attack could expose browser-stored API tokens, settings, and workflows, and let an attacker perform authenticated-equivalent API actions. The issue was rated `CVSS 8.2` and required user interaction for exploitation. The fix shipped in ComfyUI `0.28.0` as part of security advisory **GHSA-779p-m5rp-r4h4**, which also addressed additional file-handling weaknesses. The patch centralized dangerous MIME-type detection and forced risky content on `/userdata/{file}`, `/view`, and `/api/assets/{id}/content` to download as `application/octet-stream`, while adding `Content-Disposition: attachment` and `X-Content-Type-Options: nosniff` headers. Developers also hardened `/experiment/models/preview` and related path-resolution logic against path traversal, symlink escape, invalid path indexes, empty filenames, and null-byte edge cases, with regression tests added for SVG, XML, HTML, JavaScript, and preview-file abuse scenarios.
Jul 31, 2026
A critical remote code execution flaw tracked as **CVE-2026-68771** affects **ComfyUI v0.23.0** through unsafe deserialization in the `LoadTrainingDataset` node. An attacker can reportedly upload a crafted pickle file to the unauthenticated `POST /upload/image` endpoint and then trigger deserialization through `POST /prompt`, causing `torch.load` to process an attacker-controlled `shard_*.pkl` file. Because Python pickle deserialization can invoke arbitrary code via mechanisms such as `__reduce__`, successful exploitation can lead to command execution with the privileges of the ComfyUI process. A related ComfyUI code change shows the project hardened dataset shard loading by replacing `torch.load(f)` with `torch.load(f, weights_only=True)` in `comfy_extras/nodes_dataset.py`, limiting deserialization to weights-only data and reducing exposure to malicious serialized objects. Reported mitigations include upgrading to a version that incorporates the safer loading behavior, avoiding untrusted pickle files, and reviewing node security settings on exposed deployments.
Aug 1, 2026
Two high-severity flaws were disclosed in widely used JavaScript ecosystem packages, including a **remote code execution** issue in Happy DOM tracked as `CVE-2026-33943` and an **XSS protection bypass** in Express XSS Sanitizer tracked as `CVE-2026-33979`. In Happy DOM versions `15.10.0` through `20.8.7`, unsanitized names inside `export { }` declarations in the `ECMAScriptModuleCompiler` could be interpolated into generated code and executed, allowing arbitrary JavaScript injection through ES module scripts. The flaw is classified as `CWE-94` and was fixed in version `20.8.8`. Express XSS Sanitizer versions prior to `2.0.2` were found to mishandle restrictive `allowedTags` and `allowedAttributes` settings, causing explicitly empty configurations to be ignored and weakening intended sanitization controls. That behavior could leave applications exposed to cross-site scripting despite developers attempting to enforce strict filtering. The issue is tracked as `CVE-2026-33979`, mapped to `CWE-79` and `CWE-183`, and was corrected in version `2.0.2` by ensuring user-supplied sanitization settings are passed through as intended.
Jun 29, 2026