Beveiligingsadvies

CVE-2026-19371

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-09 22:15:11

Laatst bijgewerkt 2026-08-13 19:09:51

Toegewezen door VulDB

CVSS-score 5.3

Status PUBLISHED

Beschrijving

A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the file src/tools/utils.ts of the component comfy_upload_image. Such manipulation of the argument image_path leads to path traversal. An attack has to be approached locally. The project was informed of the problem early through an issue report but has not responded yet.

← Alle CVE's bekijken Bekijk op cve.org ↗