Back to the CVE list
CVE-2025-67303

Vulnerability in Comfyui Manager

CVSS score

7.5

EPSS probability

%1.4

Risk score

0.1

Published

10 mo ago

OverviewPublic Exploits (7)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
joker-xiaoyan/CVE-2025-67303
GitHub

test (★0)

Public PoCSource updated: 09.01.2026 17:44:45
G
materaj2/exploit_cve_2025_67303
GitHub

Create PoC for CVE-2025-67303 (★0)

Public PoCSource updated: 24.01.2026 19:18:38
G
Remnant-DB/CVE-2025-67303
GitHub

CVE-2025-67303 Lab (★0)

Public PoCSource updated: 08.03.2026 20:22:44
G
wcnmwcis/CVE-2026-22777
GitHub

ComfyUI-Manager Remote Code Execution exploit. Covers CVE-2025-67303 (config file exposure) and CVE-2026-22777 (CRLF injection). Includes Python script, Nuclei template, and evil git server. (★0)

Public PoCSource updated: 31.03.2026 11:04:35
G
jcaz2378/CVE-2025-67303
GitHub

Git CVE-2025-67303 payload (★0)

Public PoCSource updated: 13.05.2026 21:24:24
G
e5dfdd568a75282b712b6d93a7a18e12/CVE-2026-22777
GitHub

CVE-2026-22777 ComfyUI-Manager CRLF Injection leading to RCE chained with CVE-2025-67303 (★0)

Public PoCSource updated: 28.09.2026 21:07:34
G
Comfy-Org/ComfyUI-Manager/blob/main/docs/en/v3.38-userdata-security-migration.md
GitHub

https://github.com/Comfy-Org/ComfyUI-Manager/blob/main/docs/en/v3.38-userdata-security-migration.md

Exploit reference

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-67303"