CVE-2026-92816

ComfyUI before 0.30.0 fails to sanitize the folder_name parameter in its dataset save nodes, allowing path traversal (CWE-22) so that files can be written to arbitrary locations outside the intended output directory. An attacker triggers the flaw by crafting a malicious workflow that the victim loads, which requires user interaction but no privileges. By writing attacker-controlled content to sensitive locations, the attacker can achieve code execution through modified startup files or package initializers. Anyone running an affected ComfyUI version who loads workflows from untrusted sources is at risk, which is significant given ComfyUI's large community of shared workflows. No public proof-of-concept is known, the issue is not in CISA KEV, and exploitation has not been observed in the wild.

What to do: Upgrade ComfyUI to 0.30.0 or later. Treat workflow files from untrusted or community sources as untrusted input, and audit systems for unexpected files written outside the output directory as well as tampered startup scripts or package __init__ files. Where immediate patching is not possible, avoid loading third-party workflows on affected versions.