CVE-2025-6107
comfyanonymous comfyui utils.py set_attr dynamically-determined object attributes
- State
- Published
- Severity
- 2.3 Low
- Published
- Jun 16, 2025
- Updated
- Jun 23, 2025
- Reserved
- Jun 15, 2025
Description
A vulnerability was found in comfyanonymous comfyui 0.3.40. It has been classified as problematic. Affected is the function set_attr of the file /comfy/utils.py. The manipulation leads to dynamically-determined object attributes. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 2.3 Low | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 3.1 Low | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 3.1 Low | CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 2.6 Low | AV:N/AC:H/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
comfyuicomfyanonymous |
|
References
- VDB-312576 | comfyanonymous comfyui utils.py set_attr dynamically-determined object attributesvdb-entrytechnical-description
- VDB-312576 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- Submit #590921 | ComfyUI v0.3.40 Improperly Controlled Modification of Object Prototype Attributethird-party-advisory
- https://gist.github.com/superboy-zjc/f71b84ed074260a5e459581caa2f1fb2related
- https://gist.github.com/superboy-zjc/f71b84ed074260a5e459581caa2f1fb2#proof-of-conceptexploit
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.