CVE-2026-19371: A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the fil

A path traversal vulnerability (a type of attack where an attacker can access files outside their intended directory) was found in claude-comfyui-mcp version 1.0.0, specifically in a function that copies image files. The vulnerability can be exploited locally (meaning an attacker needs access to the computer running the software) by manipulating the image file path, and the severity is rated as low.