CVE-2026-68771 Details
Description
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard_*.pkl file via the unauthenticated POST /upload/image endpoint and then queue a workflow graph via POST /prompt referencing the uploaded file, causing torch.load to deserialize the attacker-controlled pickle payload using __reduce__ and execute arbitrary commands as the ComfyUI process user.
A deserialization vulnerability has been identified in ComfyUI version 0.23.0, specifically within the LoadTrainingDataset node. This vulnerability allows unauthenticated remote attackers to execute arbitrary Python code by uploading a malicious pickle file and triggering its deserialization. The exploitation involves uploading a crafted shard_*.pkl file through the unauthenticated POST /upload/image endpoint. Attackers can then reference the uploaded file in a workflow graph via POST /prompt, causing the application to deserialize the attacker-controlled pickle payload using the __reduce__ method. This process executes arbitrary commands as the user running the ComfyUI process.
Users can update to ComfyUI version 0.29.2, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jul 31, 2026CISA-ADP
Assessed Aug 3, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/Comfy-Org/ComfyUI | [email protected] | Source CodeVendor |
| https://github.com/Comfy-Org/ComfyUI/commit/94ee49b1612824366a8631ea069b2a1fa5c73720 | [email protected] | Source CodeVendor |
| https://github.com/Comfy-Org/ComfyUI/pull/14543 | [email protected] | Issue TrackingVendor |
| https://www.vulncheck.com/advisories/comfyui-unauthenticated-rce-via-loadtrainingdataset-pickle-deserialization | [email protected] | AdvisoryRemedy |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ComfyUI | <= 0.23.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 3, 2026 | CVE Modified | CISA-ADP |
| Jul 31, 2026 | New CVE Received | [email protected] |