CVE-2026-22777

{"id": "CVE-2026-22777", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-22777", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-12T13:22:21.429246Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "Comfy-Org", "product": "ComfyUI-Manager", "versions": [{"status": "affected", "version": ">= 4.0.0, < 4.0.5"}, {"status": "affected", "version": "< 3.39.2"}]}]}], "published": "2026-01-10T07:16:03.680", "references": [{"url": "https://github.com/Comfy-Org/ComfyUI-Manager/commit/f4fa394e0f03b013f1068c96cff168ad10bd0410", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/Comfy-Org/ComfyUI-Manager/security/advisories/GHSA-562r-8445-54r2", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-93"}]}], "descriptions": [{"lang": "en", "value": "ComfyUI-Manager is an extension designed to enhance the usability of ComfyUI. Prior to versions 3.39.2 and 4.0.5, an attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior. This issue has been patched in versions 3.39.2 and 4.0.5."}, {"lang": "es", "value": "ComfyUI-Manager es una extensi\u00f3n dise\u00f1ada para mejorar la usabilidad de ComfyUI. Antes de las versiones 3.39.2 y 4.0.5, un atacante puede inyectar caracteres especiales en los par\u00e1metros de consulta HTTP para a\u00f1adir valores de configuraci\u00f3n arbitrarios al archivo config.ini. Esto puede llevar a la manipulaci\u00f3n de la configuraci\u00f3n de seguridad o a la modificaci\u00f3n del comportamiento de la aplicaci\u00f3n. Este problema ha sido parcheado en las versiones 3.39.2 y 4.0.5."}], "lastModified": "2026-06-17T10:20:24.463", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:comfy:comfyui-manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A013F11E-DEAA-4DA0-97EE-667AEDE64317", "versionEndExcluding": "3.39.2"}, {"criteria": "cpe:2.3:a:comfy:comfyui-manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "739DC981-BB57-45A4-A8CB-1CF26CA53EB2", "versionEndExcluding": "4.0.5", "versionStartIncluding": "4.0.3"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}