PRP: ComfyUI-Manager CVE-2025-67303 Unauthenticated RCE

[Amsamms]

• Identifier of the vulnerability: CVE-2025-67303 / GHSA-2hc9-cc65-xwj8

• Affected software: ComfyUI-Manager (versions prior to v3.38)

• Type of vulnerability: RCE (command injection reachable via the extension install endpoint)

• Requires authentication: No — ComfyUI-Manager exposes administrative endpoints on the default ComfyUI port (8188/tcp) without authentication in default deployments.

• Language you would use for writing the plugin: Templated plugins

• Fingerprinting strategy (how we detect without exploiting):

  1. GET /api/manager/version → returns a JSON object containing the installed ComfyUI-Manager version. Match when the returned version is less than 3.38.
  2. Fallback if the API response shape shifts: GET /manager/ → inspect the response body for ComfyUI-Manager branding / known static asset paths.
  3. Optional liveness check: GET /api/manager/queue/status → 200 OK confirms the Manager endpoint surface is present.

  No exploit payload is sent; detection is a passive HTTP GET + version-string comparison. This follows the fingerprint-first design used by recently accepted Tsunami plugins and is the reliability profile tooryx has asked for on prior AI-stack PRP submissions.

• Resources:

  • NVD record: https://nvd.nist.gov/vuln/detail/CVE-2025-67303
  • GHSA advisory: https://github.com/ltdrdata/ComfyUI-Manager/security/advisories/GHSA-2hc9-cc65-xwj8
  • Fix commit (tagged as v3.38): Comfy-Org/ComfyUI-Manager@aaed1dc
  • Project repo: https://github.com/ltdrdata/ComfyUI-Manager
  • Popularity: ComfyUI is the dominant Stable Diffusion UI (~90K GitHub stars). ComfyUI-Manager is the de-facto extension manager for ComfyUI (~10K stars) and is enabled by default in most ComfyUI distributions, including many publicly reachable instances.

[github-actions]

Welcome to the Tsunami patch reward program!

Your issue has been added to our triage queue and will reviewed
shortly. The panel usually takes a decision once per week, so it
can take up to a week before you hear back from us.

Please, do not start the work until the panel has reached a
decision. Although we always welcome contributions, unapproved
work is not eligible for a reward.

~The Tsunami PRP team

[tooryx]

#819

[tiffanydawnatkins-cloud]

Tiffany here!!