Skip to content
OpenAdvisories

Product · Comfy-Org

ComfyUI

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-68771 Public exploit

    ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization

    ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can…

    Comfy-Org ComfyUI