Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in ComfyUI up to 0.13.0. Affected by this vulnerability is the function getuserdata of the file app/user_manager.py of the component userdata Endpoint. Such manipulation leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-6592 A vulnerability has been found in ComfyUI up to 0.13.0. Affected by this vulnerability is the function getuserdata of the file app/user_manager.py of the component user… https://www.cve.org/CVERecord?id=CVE-2026-6592
Post summary
A new vulnerability has been discovered in ComfyUI affecting the getuserdata function in the user manager component. No PoC, exploit, or patch information is provided.
🚨*CVE* CVE-2026-6592 A vulnerability has been found in ComfyUI up to 0.13.0. Affected by this vulnerability is the function getuserdata of the file app/user_manager.py of the component user… https://www.cve.org/CVERecord?id=CVE-2026-6592 ----- Traducción: CVE-2026-6592 Se … http://infoflow.cloud`
Post summary
A new CVE-2026-6592 has been identified in ComfyUI 0.13.0, affecting the getuserdata function in app/user_manager.py, but no PoC, exploit, patch, or active exploitation details are provided.