How severe is CVE-2025-67303?

CVE-2025-67303 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability none.

Is CVE-2025-67303 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (68th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-67303?

CVE-2025-67303 affects Comfy Comfyui-manager. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2025-67303?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

Does CVE-2025-67303 have an EU (EUVD) identifier?

Yes. CVE-2025-67303 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-0815.

When was CVE-2025-67303 published?

CVE-2025-67303 was published on 2026-01-05 and last updated on 2026-06-17.

CVE-2025-67303

CVE-2025-67303 is a high-severity vulnerability in Comfy Comfyui-manager with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-420.

Key facts

Severity: High (CVSS 3.x base score 7.5)
EPSS exploit prediction: 1% (68th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2026-0815
Weakness: CWE-420
Affected product: Comfy Comfyui-manager
Published: 2026-01-05
Last modified: 2026-06-17

Description

An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface

Frequently asked questions

What is CVE-2025-67303?: An issue in ComfyUI-Manager prior to version 3.38 allowed remote attackers to potentially manipulate its configuration and critical data. This was due to the application storing its files in an insufficiently protected location that was accessible via the web interface
How severe is CVE-2025-67303?: CVE-2025-67303 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity high, and availability none.
Is CVE-2025-67303 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (68th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-67303?: CVE-2025-67303 affects Comfy Comfyui-manager. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2025-67303?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
Does CVE-2025-67303 have an EU (EUVD) identifier?: Yes. CVE-2025-67303 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2026-0815.
When was CVE-2025-67303 published?: CVE-2025-67303 was published on 2026-01-05 and last updated on 2026-06-17.

References

EU advisories (EUVD)

Affected products (1)

cpe:2.3:a:comfy:comfyui-manager:*:*:*:*:*:*:*:*

More vulnerabilities in Comfy Comfyui-manager

CVE-2026-22777 — High (CVSS 7.5): ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an…

All CVEs affecting Comfy Comfyui-manager →

Other CWE-420 vulnerabilities

CVE-2023-20198 — Critical (CVSS 10.0): Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco…
CVE-2025-52921 — Critical (CVSS 9.9): In Innoshop through 0.4.1, an authenticated attacker could exploit the File Manager functions in the admin panel to…
CVE-2025-13315 — Critical (CVSS 9.8): Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can…
CVE-2025-54309 — Critical (CVSS 9.0): CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23, when the DMZ proxy feature is not used, mishandles AS2 validation…
CVE-2025-54351 — High (CVSS 8.9): In iperf before 3.19.1, net.c has a buffer overflow when --skip-rx-copy is used (for MSG_TRUNC in recv).
CVE-2026-40217 — High (CVSS 8.8): LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…

Browse all CWE-420 vulnerabilities →