ComfyUI-Bmad-Nodes में कोड इंजेक्शन (Code Injection) की भेद्यता है। यह समस्या BuildColorRangeHSVAdvanced, FilterContour और FindContour कस्टम नोड्स में सत्यापन बाईपास (validation bypass) के कारण है। प्रत्येक नोड के एंट्रीपॉइंट (entrypoint) फ़ंक्शन में, eval को कॉल किया जाता है जिसे एक ऐसे वर्कफ़्लो को उत्पन्न करके ट्रिगर किया जा सकता है जो नोड में एक तैयार स्ट्रिंग (crafted string) इंजेक्ट (inject) करता है। इससे सर्वर पर मनमाना कोड (arbitrary code) निष्पादित किया जा सकता है।

The impact of this vulnerability is severe. An attacker can inject malicious code into a ComfyUI workflow, which, when executed, will run on the server hosting the ComfyUI instance. This could lead to complete system compromise, including data exfiltration, malware installation, and denial of service. The ability to execute arbitrary code grants the attacker significant control over the affected system. The vulnerability's reliance on workflow manipulation makes it particularly concerning, as malicious workflows could be distributed through seemingly legitimate channels, increasing the attack surface. This is similar to vulnerabilities where user-supplied data is directly evaluated without proper sanitization.

Users who have deployed ComfyUI-Bmad-Nodes in production environments, particularly those with public-facing instances or those allowing untrusted users to upload or modify workflows, are at significant risk. Shared hosting environments where multiple users share the same ComfyUI instance are also particularly vulnerable.

• python / server:

import os
import subprocess

def check_comfyui_nodes():
    try:
        # Check for the vulnerable nodes
        subprocess.run(['python', '-c', 'import comfyui_mad_nodes; print(comfyui_mad_nodes.__version__)'], check=True, capture_output=True)
        print('Vulnerable ComfyUI-Bmad-Nodes detected.')
    except FileNotFoundError:
        print('ComfyUI-Bmad-Nodes not found.')
    except subprocess.CalledProcessError as e:
        print(f'Error checking version: {e}')

check_comfyui_nodes()

• generic web:

curl -I http://your-comfyui-server/ | grep -i 'eval'

• generic web:

 grep -r 'eval' /path/to/comfyui/nodes/

1. 2024-12-13Disclosure

   disclosure

1. आरक्षित2023-12-22
2. प्रकाशित2024-12-13
3. संशोधित2024-12-23
4. EPSS अद्यतन2026-04-02

While a direct patch is pending, several mitigation steps can reduce the risk. First, restrict access to the ComfyUI server to trusted users only. Implement strict input validation and sanitization on all user-supplied data, particularly within the workflow definition. Consider deploying a Web Application Firewall (WAF) with rules to detect and block suspicious workflow patterns or code injection attempts. Monitor system logs for unusual activity, such as unexpected process executions or file modifications. As a temporary measure, disabling the vulnerable custom nodes (BuildColorRangeHSVAdvanced, FilterContour, FindContour) can prevent exploitation, but will impact functionality. After implementing these measures, verify their effectiveness by attempting to load a known malicious workflow in a controlled environment.