GHSA-562r-8445-54r2 is a high-severity (CVSS 7.5) CWE-93 vulnerability in comfy-cli. O3 Security confirms whether GHSA-562r-8445-54r2 is actually reachable in your code before you act, and blocks exploitation at runtime until you patch.
ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler
Real-World Exposure
comfy-cli🐍comfy-cliReal-time download stats are indexed for npm and PyPI packages. This vulnerability affects PyPI packages — download data is not available via public APIs for these ecosystems.
Description
Impact
Vulnerability Type: CRLF Injection via ConfigParser
An attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior.
Affected Users: Users running ComfyUI-Manager in environments where ComfyUI is configured with the --listen option to allow remote access.
CVSS Score: 7.5 (High)
Patches
Fixed in the following versions:
- 3.39.2 (v3.x branch)
- 4.0.5 (v4.x branch)
Sanitization logic was added to the write_config() function to remove CRLF and NULL characters from all string values.
Workarounds
If upgrading is not possible:
- Run ComfyUI-Manager only on trusted networks
- Block external access via firewall
- Run on localhost only without the
--listenoption
References
Credit
This vulnerability was reported by:
- 李存义 [email protected]
- D0n9 Li [email protected]
- Swings [email protected]
- Osword from SGLAB of Legendsec at Qi'anxin Group [email protected]
Affected Packages
| Ecosystem | Package | Vulnerable range | Fix |
|---|---|---|---|
| 🐍PyPI | comfy-cli | ≥ 4.0.0&&< 4.0.5 | 4.0.5 |
| 🐍PyPI | comfy-cli | all versions | 3.39.2 |
Detection & mitigation playbook
Open-source dependencyDetect
Scan your dependency tree (package-lock.json, pnpm-lock.yaml, requirements.txt, go.sum, etc.) for comfy-cli. O3's reachability analysis confirms whether the vulnerable code path is actually invoked in your application, so you act on real exposure instead of every transitive match.
Fix
Update comfy-cli to 4.0.5 or later, then make sure no transitive (indirect) dependency still pins the vulnerable range — O3 confirms GHSA-562r-8445-54r2 is resolved across your whole dependency graph.
Workarounds
If you can't upgrade right away: gate or disable the affected feature, validate untrusted input at the boundary, and avoid passing attacker-controlled data into the vulnerable path. O3's runtime protection blocks exploitation in production as an interim safeguard until the upgrade lands.
How O3 protects you
O3 pinpoints whether GHSA-562r-8445-54r2 is reachable in your code and exactly where to fix it, then blocks exploitation in production at runtime until the patched version is deployed.
Tailored to GHSA-562r-8445-54r2. Runtime protection reduces exposure until a permanent patch is applied and verified — it complements patching, it doesn't replace it.
Frequently Asked Questions
Is GHSA-562r-8445-54r2 in your dependencies?
O3 detects GHSA-562r-8445-54r2 across PyPI dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.