pypi comfy-cli vulnerabilities

Latest pypi comfy-cli CVEs

Newest publication first

1. CVE-2026-22777 ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler

   Published 2026-01-10

   High·CVSS 7.5 EPSS 0.87%

   ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting t...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.