CVE-2024-12952 | melMass comfy_mtb up to 0.1.4 Dependency comfy_mtb/endpoint.py run_command code injection

A vulnerability classified as critical was found in melMass comfy_mtb up to 0.1.4. Affected by this vulnerability is the function run_command of the file comfy_mtb/endpoint.py of the component Dependency Handler. The manipulation leads to code injection.

This vulnerability is known as CVE-2024-12952. The attack can be launched remotely. Furthermore, there is an exploit available.

It is recommended to apply a patch to fix this issue.