Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in ComfyUI up to 0.13.0. Affected is the function folder_paths.get_annotated_filepath of the file folder_paths.py of the component LoadImage Node. This manipulation of the argument Name causes path traversal. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-6591 A flaw has been found in ComfyUI up to 0.13.0. Affected is the function folder_paths.get_annotated_filepath of the file folder_paths.py of the component LoadImage Node.… https://www.cve.org/CVERecord?id=CVE-2026-6591
Post summary
The text reports the discovery of CVE‑2026‑6591 in ComfyUI, noting the impacted function and component, but provides no PoC, exploit, patch, or technical details.
CVE-2026-6591 Path Traversal in ComfyUI LoadImage Node Up to Version 0.1... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6591 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet announces a newly disclosed path traversal vulnerability in the ComfyUI LoadImage node (affecting up to version 0.1), linking to a vulnerability database for additional details.