CVE-2026-68771

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

August 1, 2026

Last Seen

August 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in ComfyUI v0.23.0 (CVE-2026-68771)72.0

ComfyUI v0.23.0 has a critical remote code execution vulnerability (CVE-2026-68771) due to unsafe deserialization in the LoadTrainingDataset node. Unauthenticated remote attackers can exploit this flaw by uploading a malicious pickle file through the /upload/image endpoint and executing arbitrary Py...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical RCE Vulnerability in ComfyUI v0.23.0 (CVE-2026-68771)

Aug 2·2 sources

Related Entities

Zero-day Exploit Torch Cwe-502 - Deserialization Of Untrusted Data T1203 - Exploitation for Client Execution ComfyUI Pickle Python

CVE-2026-68771

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical RCE Vulnerability in ComfyUI v0.23.0 (CVE-2026-68771)

Related Articles (3)

CVE-2026-68771 - Exploits & Severity

Related Entities