CVE-2026-56671

Name of the Vulnerable Software and Affected Versions ComfyUI versions prior to 0.28.0

Description An unauthenticated remote attacker can read image-decodable files and enumerate host paths. The get model preview() function in app/model manager.py uses os.path.join(folder, filename) with an unrestricted {filename:.*} route capture without performing a containment check. This allows the use of absolute paths, literal ../ traversal, percent-encoded %2e%2e%2f traversal, or an unbounded path index to escape the model directory. Because the target file is processed through Pillow and re-encoded as WEBP, the disclosure is limited to files that can be decoded as images, though it still allows for internal-path leakage and file-existence enumeration.

Recommendations Update to version 0.28.0.