ComfyUI-Bmad-Nodes ist anfällig für Code Injection. Das Problem ergibt sich aus einer Validierungsumgehung in den BuildColorRangeHSVAdvanced, FilterContour und FindContour benutzerdefinierten Nodes. In der Einstiegsfunktion t

The impact of this vulnerability is severe. An attacker can inject malicious code into a ComfyUI workflow, which, when executed, will run on the server hosting the ComfyUI instance. This could lead to complete system compromise, including data exfiltration, malware installation, and denial of service. The ability to execute arbitrary code grants the attacker significant control over the affected system. The vulnerability's reliance on workflow manipulation makes it particularly concerning, as malicious workflows could be distributed through seemingly legitimate channels, increasing the attack surface. This is similar to vulnerabilities where user-supplied data is directly evaluated without proper sanitization.

Users who have deployed ComfyUI-Bmad-Nodes in production environments, particularly those with public-facing instances or those allowing untrusted users to upload or modify workflows, are at significant risk. Shared hosting environments where multiple users share the same ComfyUI instance are also particularly vulnerable.

• python / server:

import os
import subprocess

def check_comfyui_nodes():
    try:
        # Check for the vulnerable nodes
        subprocess.run(['python', '-c', 'import comfyui_mad_nodes; print(comfyui_mad_nodes.__version__)'], check=True, capture_output=True)
        print('Vulnerable ComfyUI-Bmad-Nodes detected.')
    except FileNotFoundError:
        print('ComfyUI-Bmad-Nodes not found.')
    except subprocess.CalledProcessError as e:
        print(f'Error checking version: {e}')

check_comfyui_nodes()

• generic web:

curl -I http://your-comfyui-server/ | grep -i 'eval'

• generic web:

 grep -r 'eval' /path/to/comfyui/nodes/

1. 2024-12-13Disclosure

   disclosure

1. Reserviert2023-12-22
2. Veröffentlicht2024-12-13
3. Geändert2024-12-23
4. EPSS aktualisiert2026-04-02

While a direct patch is pending, several mitigation steps can reduce the risk. First, restrict access to the ComfyUI server to trusted users only. Implement strict input validation and sanitization on all user-supplied data, particularly within the workflow definition. Consider deploying a Web Application Firewall (WAF) with rules to detect and block suspicious workflow patterns or code injection attempts. Monitor system logs for unusual activity, such as unexpected process executions or file modifications. As a temporary measure, disabling the vulnerable custom nodes (BuildColorRangeHSVAdvanced, FilterContour, FindContour) can prevent exploitation, but will impact functionality. After implementing these measures, verify their effectiveness by attempting to load a known malicious workflow in a controlled environment.