Comfy-Org/ComfyUI-Manager
1
0
Fork 0
mirror of https://github.com/Comfy-Org/ComfyUI-Manager.git synced 2026-11-05 07:47:25 +00:00
Code Issues 456 Projects Packages Wiki Activity

[GH-ISSUE #668] Security Issue: when in multiple users, someone hijack my machine from PIP #306

New issue
Closed
opened 2026-10-27 21:15:56 +00:00 by bsakaguchi · 3 comments
bsakaguchi commented 2026-10-27 21:15:56 +00:00
Owner
Copy link

Originally created by @MorrisLu-Taipei on GitHub (May 12, 2024).
Original GitHub issue: https://github.com/Comfy-Org/ComfyUI-Manager/issues/668

Please help to provide admin login / password
Now, my workaround solution is REMOVE ComfyUI-Manger, when provide server url to my students.

this is real case,
I am teacher, providing my comfyui server url for our students.

but someone install lolminer into our machine, see picture.
Clipboard01

Originally created by @MorrisLu-Taipei on GitHub (May 12, 2024). Original GitHub issue: https://github.com/Comfy-Org/ComfyUI-Manager/issues/668 **Please help to provide admin login / password** Now, my workaround solution is REMOVE ComfyUI-Manger, when provide server url to my students. this is real case, I am teacher, providing my comfyui server url for our students. but someone install lolminer into our machine, see picture. <img width="960" alt="Clipboard01" src="https://github.com/ltdrdata/ComfyUI-Manager/assets/22585297/bbfd77c6-8c1e-4403-a0af-5a9051519d91">
bsakaguchi commented 2026-10-27 21:15:57 +00:00
Author
Owner
Copy link

@ltdrdata commented on GitHub (May 12, 2024):

Can you send me the comfyui.log files?

In a system like yours that is open to the general public, it is not recommended to use ComfyUI-Manager.
I should patch the system to allow for an option that disables the functionality related to custom node installations.

<!-- gh-comment-id:2106247543 --> @ltdrdata commented on GitHub (May 12, 2024): Can you send me the `comfyui.log` files? In a system like yours that is open to the general public, it is not recommended to use ComfyUI-Manager. I should patch the system to allow for an option that disables the functionality related to custom node installations.
bsakaguchi commented 2026-10-27 21:15:57 +00:00
Author
Owner
Copy link

@ltdrdata commented on GitHub (May 12, 2024):

You can disable unsecure features.
set disable_unsecure_features = True in config.ini

https://github.com/ltdrdata/ComfyUI-Manager#troubleshooting

<!-- gh-comment-id:2106258644 --> @ltdrdata commented on GitHub (May 12, 2024): You can disable unsecure features. set `disable_unsecure_features = True` in `config.ini` https://github.com/ltdrdata/ComfyUI-Manager#troubleshooting
bsakaguchi commented 2026-10-27 21:15:57 +00:00
Author
Owner
Copy link

@ltdrdata commented on GitHub (May 14, 2024):

Security feature is updated.
https://github.com/ltdrdata/ComfyUI-Manager#security-policy

<!-- gh-comment-id:2110595362 --> @ltdrdata commented on GitHub (May 14, 2024): Security feature is updated. https://github.com/ltdrdata/ComfyUI-Manager#security-policy
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
fix/per-graph-clear-hook
fix/manager-theme-styles
desktop-linux-form-factor
chore/node-runtime-refresh-2026-09-28
manager-v4
feat/v4-flagged-policy
fix/v3-ui-escaping
fix/v4-ui-escaping
feat/v3-flagged-policy
fix/v4-uv-conflict-attribution
test/issue-3128-c1-guard
fix/issue-3128-c1
feat/v4-dedicated-install-flags
fix/pygit2-fallback-followups
fix/comfyui-versions-pick-latest
brucew4yn3rp/main
manager-cacheless
feat/manager-v4-general-pip-policy
readme-for-migration
draft-v4
reverted-matrix-nio
fix/missing-nodes-in-subgraph
draft-v4-snapshot-diff
feat/add-taskqueue-unit-tests
feat/complete-todo-implementation
docs/docs-readme
docs/js-readme
tests/api-tests
api/openapi-spec
docs/node-db-readme
docs/glob-readme
draft-v4-add-legacy-route
draft-v4-contributing
feat/cacheless-v2
rh-test
rhform
dbg1484-1
rework_version_store
attach_node_versions
refactor/pygit2
4.3
3.42
4.2.2
4.2.1
4.1
3.39.3
4.1b8
4.1b6
4.1b5
4.1b4
4.1b3
4.1b2
4.1b1
4.0.5
3.39.2
3.39.1
4.0.4
4.0.3
3.39
3.38.3
3.38.2
3.38
3.37.1
3.37
3.35
3.33.8
3.33.7
3.33.6
3.33.5
3.33.4
3.33.3
3.33.2
3.33
3.32.5
3.32.4
3.32.3
3.32.2
3.32.1
3.32
3.31.13
3.31.12
3.31.11
3.31.8
3.31.6
3.31.4
3.31.2
3.31.1
3.31
3.30.8
3.30.7
3.30.6
3.30.5
3.30.4
3.30.2
3.29
3.28
3.27.11
3.27.8
3.27.3
3.27.2
3.27
3.26.2
3.26.1
3.26
3.25.1
3.25
3.24.1
3.24
3.23
3.22
3.21.5
3.21.3
3.21.1
3.19
3.18.1
3.17.11
3.17.9
3.17.7
3.17.6
3.17.4
3.17.3
3.17.2
3.17.1
3.17
3.16
3.15
3.14
3.13.1
3.13
3.12.2
3.12.1
3.12
3.11.3
3.11.2
3.11
3.10
3.9.4
3.9.3
3.9.2
3.9.1
3.9
3.8.1
3.8
3.7.6
3.7.5
3.7.4
3.7.3
3.7.2
3.7
3.6.5
3.6.4
3.6.2
3.6.1
3.5
3.3.11
3.3.10
3.3.9
3.3.8
3.3.7
3.3.6
3.3.5
3.3.4
3.3.3
3.3.2
2.56.2
3.3
2.55.5
2.55.3
2.54
2.53
2.52
3.0.1
2.51.9
2.51.8
2.51.7
2.51.6
2.51.5
2.51.4
2.51.2
2.51.1
2.50.1
2.50
2.48.7
2.48.6
2.48.3
2.48.4
2.48.2
2.48.1
Labels
Clear labels   
bug

   
CNR

   
duplicate

   
enhancement

   
feature request

   
feature request

   
pull-request
Mirrored from GitHub Pull Request

  
wontfix
No labels
bug
CNR
duplicate
enhancement
feature request
feature request
pull-request
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Comfy-Org/ComfyUI-Manager#306
No description provided.