This vulnerability in ComfyUI impacts the get_model_preview function of the Model Preview Endpoint component, allowing path traversal attacks. An attacker can remotely manipulate file paths to access files outside the intended directory scope. The issue affects all versions up to and including 0.13.0. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and low impact on confidentiality. No official fix or patch has been released, and the vendor has not responded to the disclosure.

Successful exploitation could allow an attacker to read arbitrary files on the system running ComfyUI with limited privileges. This could lead to unauthorized disclosure of sensitive information. The impact is rated medium based on the CVSS score and the nature of the vulnerability. There is no indication of privilege escalation, denial of service, or integrity impact from the available data.

No official patch or remediation is currently available, and the vendor has not provided any guidance. Users should monitor the vendor's channels for updates. Until a fix is released, consider restricting network access to the affected service and applying compensating controls to limit exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.