CVE-2026-6591

MEDIUM 4.3

ComfyUI LoadImage Node folder_paths.py folder_paths.get_annotated_filepath path traversal

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A flaw has been found in ComfyUI up to 0.13.0. Affected is the function folder_paths.get_annotated_filepath of the file folder_paths.py of the component LoadImage Node. This manipulation of the argument Name causes path traversal. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-22
Vendor	n/a
Product	comfyui
Published	Apr 20, 2026

Stay Ahead of the Next One

Get instant alerts for n/a comfyui

Be the first to know when new medium vulnerabilities affecting n/a comfyui are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

n/a / ComfyUI

0.1 0.2 0.3 0.4 0.5 0.6 0.7 0.8 0.9 0.10 0.11 0.12 0.13.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/358226 vuldb.com: https://vuldb.com/vuln/358226/cti vuldb.com: https://vuldb.com/submit/791112 gist.github.com: https://gist.github.com/YLChen-007/1e6db39703626dc5c1a2505426754333

Credits

🔍 Eric-c (VulDB User) VulDB CNA Team