CVE-2026-68771

Name of the Vulnerable Software and Affected Versions ComfyUI version 0.23.0

Description An unsafe deserialization issue exists in the LoadTrainingDataset node. Unauthenticated remote attackers can execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. The attack involves uploading a malicious shard *.pkl file through the POST '/upload/image' endpoint and subsequently queuing a workflow graph via the POST '/prompt' endpoint that references the uploaded file. This process causes torch.load to deserialize the payload using reduce, executing arbitrary commands with the privileges of the ComfyUI process user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.