Fixing ComfyUI Manager Security Level Error

When encountering the error This action is not allowed with this security level configuration while installing ComfyUI plugins via Git URL, it is essentially due to ComfyUI Manager’s security policy restricting the execution of external code. This tutorial provides solutions covering all platforms: Windows/macOS/Linux.

1. Analysis of the Error Causes

This error is triggered by the security level mechanism of ComfyUI Manager. When the default setting is security_level = normal, it prevents the installation of unverified third-party Git repositories. This mechanism aims to prevent malicious code injection but can lead to the failure of some plugin installations.

In fact, the ComfyUI Manager repository already explains how to resolve this issue by modifying the config.ini file to change the security level to weak.

2. Core Solution: Modifying the Security Level

Step 1: Locate the Configuration File

Depending on the version of ComfyUI-Manager, the path to the configuration file differs:

• Manager version 3.0 and above:

  • ComfyUI/user/default/ComfyUI-Manager/config.ini

• Manager version below 3.0:

  • Windows: ComfyUI root directory\custom_nodes\ComfyUI-Manager\config.ini
  • macOS: ~/Documents/ComfyUI/custom_nodes/ComfyUI-Manager/config.ini
  • Cloud server: Access the installation directory via JupyterLab or SSH to find it

Step 2: Modify the Security Parameters

Open config.ini with a text editor and find:

security_level = normal

Change it to:

security_level = weak  # Allow installation of plugins from any source

Note: Some systems may require administrator permissions to save changes. Windows users can right-click the file → Properties → uncheck the ‘Read-only’ attribute.

Step 3: Restart the Service

• ComfyUI Desktop Version: Completely exit ComfyUI and then restart
• ComfyUI Portable Version: Close and then click run_nvidia_gpu.bat to restart

Verify the Operation

Try to install a plugin via Git URL in the Manager (for example, enter https://github.com/comfyanonymous/ComfyUI_bitsandbytes_NF4). If no error occurs, it is successful.

3. Alternative Solution: Safe Mode Installation

Open the Manager → Install Custom Nodes

Advantage: No configuration modification is required, but it only supports plugins that are registered in the Manager database.

4. Others

1. config.ini Not Found

If the config.ini is not found:

• Search the entire disk using tools like Everything
• Reinstall the ComfyUI Manager plugin

2. Special Handling for Cloud Environments

On a cloud deployment platform:

• Find the custom_nodes/ComfyUI-Manager/config.ini file via the JupyterLab terminal
• Press Ctrl+O to save → Ctrl+X to exit

3. Update ComfyUI and Manager

As an optional step to resolve the error, consider updating to the latest version of ComfyUI and ComfyUI-Manager, as sometimes new versions fix related security policy issues.

5. Security Recommendations

Temporarily Enable Weak Security Mode

• After installation, immediately restore security_level = normal to avoid long-term exposure risks.