ComfyUI security policy and published advisories
Source: https://github.com/Comfy-Org/ComfyUI/security
L07 2026-10-17: canonical URL updated from https://github.com/comfyanonymous/ComfyUI/security (GitHub redirect to https://github.com/Comfy-Org/ComfyUI).
Structured fields
{
"archived": false,
"checked_at": "2026-10-17T00:00:00.000Z",
"usefulness": "Core project's threat model and advisory list: ComfyUI binds to 127.0.0.1 by default, custom nodes are treated as trusted third-party code, and issues needing --listen or a specific custom node are out of scope. Lists four High advisories (XSS via /view and /userdata, path traversal via LoadImage and model preview).",
"source_type": "documentation",
"availability": "available",
"source_owner": "comfyanonymous (ComfyUI project)",
"next_check_at": "2026-10-18T00:00:00.000Z",
"known_limitations": [
"Fetched page does not show affected/fixed versions for the advisories; read each GHSA before citing versions."
],
"upstream_updated_at": "2026-10-17T04:26:55.000Z"
}Evidence claims
- [sourced_fact] Policy: ComfyUI is meant to run locally on 127.0.0.1; custom nodes are trusted third-party code; not treated as vulnerabilities: problems requiring --listen or non-default exposure, needing a specific custom node, deserialization in old PyTorch, workflow-induced crashes/resource exhaustion. source
- [sourced_fact] Four advisories rated High, published July 15, 2026: stored XSS via SVG upload on /view (GHSA-rj8c-c4p8-3c5h), stored XSS via /userdata/{file} (GHSA-53g8-45wq-pcv8), path traversal in LoadImage via /prompt (GHSA-rvxv-29p8-pxgq), path traversal in /experiment/models/preview (GHSA-pj59-g5vv-74q4). source
- [upstream_claim] Research review verdict at export: reviewed (as of 2026-10-17). Recorded by the research pipeline, not a hub review outcome; evidence.review stays unreviewed until an independent reviewer records one.
Rights
| component | license | hosting | redistribution | modification | training | Evidence and notes |
|---|---|---|---|---|---|---|
| documentation | unknown | unknown | unknown | unknown | unknown | Security page text; license not applicable/not stated. |