Security Advisories

ComfyUI Desktop rendered the ComfyUI frontend with no Content-Security-Policy while the preload exposed an unguarded shell bridge, so any script execution in the frontend origin escalated to arbitrary commands on the host.

Advisory

GHSA-83m9-jm26-mm4c

Affected

ComfyUI Desktop <= 1.0.34

Patched

>= 1.0.35

Credit

Finder — Comfy-Org/Comfy-Desktop

Published

Aug 18, 2026

Group-node and subgraph names taken from a workflow file reached a v-html sink in the node search without escaping, so opening a crafted workflow and dragging a link off a node slot executed attacker-controlled HTML.

Advisory

GHSA-2gr5-vw2p-2hcf

Affected

comfyui-frontend-package (pip) >= 1.2.57, <= 1.50.1

Patched

>= 1.50.2

Credit

Finder — Comfy-Org/ComfyUI_frontend

Published

Aug 18, 2026

CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Node property names carried inside a workflow file were interpolated into a markup string and assigned to innerHTML by the node Properties dialog, so opening a crafted workflow ran attacker-controlled script in the ComfyUI frontend origin.

Advisory

GHSA-j6xv-rx8r-mh6j

Affected

comfyui-frontend-package (pip) >= 1.1.0, <= 1.50.3

Patched

>= 1.50.4

Credit

Finder — Comfy-Org/ComfyUI_frontend

Published

Aug 18, 2026

CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H