ComfyUI versions before 0.28.0 contain a path traversal vulnerability (CWE-22) due to improper limitation of pathname to a restricted directory. The functions folder_paths.get_annotated_filepath and exists_annotated_filepath concatenate workflow-controlled annotated filenames to a base directory without containment checks. This allows an unauthenticated attacker to craft POST /prompt workflows using nodes like LoadImage to probe arbitrary host filesystem paths and exfiltrate image-format files via the /view endpoint. The LoadImage node's VALIDATE_INPUTS method causes the execution engine to skip input-directory validation, contributing to the issue. Affected nodes include LoadImage, LoadImageMask, LoadImageOutput, LoadAudio, LoadLatent, LoadVideo, and Load3D. The vulnerability is resolved in ComfyUI version 0.28.0.

An unauthenticated attacker can exploit this vulnerability to read arbitrary files on the host filesystem that are accessible to the application, specifically image-format files, leading to potential data exposure. There is no indication of impact on integrity or availability. The CVSS score of 7.5 reflects high confidentiality impact with no required privileges or user interaction.

Upgrade ComfyUI to version 0.28.0 or later, where this vulnerability is fixed. No other mitigation or temporary workaround is indicated in the available data.