ComfyUI is a modular diffusion model GUI, API, and backend with a graph-and-node interface. Prior to 0.28.0, folder_paths.get_annotated_filepath and exists_anno…

ComfyUI versions prior to 0.28.0 contain a path traversal vulnerability in folder_paths.get_annotated_filepath and exists_annotated_filepath functions. These functions join workflow-controlled annotated filenames to a base directory without performing a containment check. An unauthenticated attacker can craft a malicious POST /prompt workflow using affected nodes such as LoadImage, LoadImageMask, LoadImageOutput, LoadAudio, LoadLatent, LoadVideo, and Load3D to probe arbitrary host paths. The vulnerability allows exfiltration of image-format files through the /view endpoint. The issue is compounded by LoadImage's VALIDATE_INPUTS method, which causes the execution engine to bypass COMBO input-directory validation. The vulnerability has been patched in ComfyUI version 0.28.0.