CVE-2024-12952

A vulnerability classified as critical was found in melMass comfy_mtb up to 0.1.4. Affected by this vulnerability is the function run_command of the file comfy_mtb/endpoint.py of the component Dependency Handler. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The patch is named d6e004cce2c32f8e48b868e66b89f82da4887dc3. It is recommended to apply a patch to fix this issue.

• CWE-74
• CWE-94

• https://github.com/melMass/comfy_mtb/commit/d6e004cce2c32f8e48b868e66b89f82da4887dc3
• https://github.com/melMass/comfy_mtb/issues/224
• https://github.com/melMass/comfy_mtb/issues/224#issuecomment-2552664778
• https://github.com/melMass/comfy_mtb/issues/224#issuecomment-2553432365
• https://vuldb.com/?ctiid.289315
• https://vuldb.com/?id.289315
• https://vuldb.com/?submit.468683
• https://github.com/melMass/comfy_mtb/issues/224
• https://github.com/melMass/comfy_mtb/issues/224#issuecomment-2552664778
• https://github.com/melMass/comfy_mtb/issues/224#issuecomment-2553432365

Published

Dec 26, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12947A vulnerability was found in Codezips Hospital Management Sy…9.8
• CVE-2024-12948A vulnerability was found in code-projects Travel Management…8.8
• CVE-2024-12949A vulnerability was found in code-projects Travel Management…8.8
• CVE-2024-1295The events-calendar-pro WordPress plugin before 6.4.0.1, The…6.5
• CVE-2024-12950A vulnerability was found in code-projects/projectworlds Tra…8.8
• CVE-2024-12951A vulnerability classified as critical has been found in 100…9.8
• CVE-2024-12953A vulnerability, which was classified as critical, has been …9.8
• CVE-2024-12954A vulnerability, which was classified as critical, was found…9.8
• CVE-2024-12955A vulnerability has been found in PHPGurukul Blood Bank & Do…4.3
• CVE-2024-12956A vulnerability was found in 1000 Projects Portfolio Managem…9.8
• CVE-2024-12957A file handling command vulnerability in certain versions of…8.4
• CVE-2024-12958A vulnerability classified as critical has been found in 100…9.8