Critical RCE Vulnerability in ComfyUI v0.23.0 (CVE-2026-68771)

Feedly

Critical RCE Vulnerability in ComfyUI v0.23.0 (CVE-2026-68771)

First seen 2 Aug 2026, 08:52 UTC • •72.0

Article Content

1 / 4

Browse articles

ThreatCluster •August 3, 2026 at 06:03 UTC

•CVE-2026-68771 allows unauthenticated RCE in ComfyUI v0.23.0 via unsafe deserialization.
•Attackers can upload malicious pickle files to execute arbitrary code as the ComfyUI process user.
•A patch is available, and it is crucial to implement access controls on affected endpoints.

ComfyUI v0.23.0 has a critical remote code execution vulnerability (CVE-2026-68771) due to unsafe deserialization in the LoadTrainingDataset node. Unauthenticated remote attackers can exploit this flaw by uploading a malicious pickle file through the /upload/image endpoint and executing arbitrary Python code. The vulnerability allows attackers to control the ComfyUI process user and execute system commands. As of now, there is no evidence of exploitation in the wild, and no public proof-of-concept exists. A patch has been released, and users are advised to update to the latest version. Network-level access controls are recommended to restrict access to vulnerable endpoints. The CVSS base score for this vulnerability is 9.8, indicating its critical nature.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 47d ago How this analysis works

Timeline

2026-07-31

CVE-2026-68771 published

The vulnerability in ComfyUI v0.23.0 was officially published, detailing the risks of unsafe deserialization.

2026-08-01

Security advisory released

A security advisory was issued, confirming the critical nature of the vulnerability with a CVSS score of 9.8 and recommending immediate updates.

Recent

No evidence of exploitation found

As of the latest reports, there is no evidence of the vulnerability being actively exploited in the wild.

More articles in this cluster (3)

Threat Graph

8 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Zero-day Exploit
T1203 - Exploitation for Client Execution

Campaign (1)

Torch

Vulnerability (1)

CVE-2026-68771

Weakness (1)

Cwe-502 - Deserialization Of Untrusted Data

Affected Platform (1)

ComfyUI

Tool (2)

Python
Pickle

Relationships

Python exploits CVE-2026-68771
Pickle exploits CVE-2026-68771
CVE-2026-68771 targets ComfyUI
Zero-day Exploit targets ComfyUI
T1203 - Exploitation for Client Execution targets ComfyUI
Torch related to Cwe-502 - Deserialization Of Untrusted Data

Following this threat?

Track CVE-2026-68771 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Zero-Day Vulnerability in Cisco Secure Email Gateway Exploited On September 14, 2026, Cisco disclosed a critical SQL injection vulnerability (CVE-2026-76461) in its Secure Email Gateway, allowing unauthenticated remote attackers to execute arbitrary commands with root privileges. This vulnerability arises from insufficient validation in the email parsing logic. Cisco confirmed…

Critical GitLab CVE-2026-85706 Exploited; Microsoft Issues Record 974 Patches A critical CVE-2026-85706 path-traversal vulnerability in GitLab (CVSS 10.0) was exploited in the wild just hours after its disclosure on September 12, 2026. Microsoft released its largest-ever patch batch, addressing 974 vulnerabilities, including several actively exploited Windows flaws. The GitLab flaw allows…