CVE-2026-68771

Received Received - Intake

Unsafe Deserialization in ComfyUI LoadTrainingDataset Node

Publication date: 2026-07-31

Last updated on: 2026-07-31

Assigner: VulnCheck

Description

ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard_*.pkl file via the unauthenticated POST /upload/image endpoint and then queue a workflow graph via POST /prompt referencing the uploaded file, causing torch.load to deserialize the attacker-controlled pickle payload using __reduce__ and execute arbitrary commands as the ComfyUI process user.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-31

Last Modified

2026-07-31

Generated

2026-08-01

AI Q&A

2026-08-01

EPSS Evaluated

N/A

NVD

CVE-2026-68771

EUVD

EUVD-2026-51652

Affected Vendors & Products

Vendor	Product	Version / Range
comfyui	comfyui	0.23.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

CVE-2026-68771 is an unsafe deserialization vulnerability in ComfyUI v0.23.0. It allows unauthenticated remote attackers to execute arbitrary Python code by uploading a malicious pickle file. The vulnerability exists in the LoadTrainingDataset node, where a crafted shard_*.pkl file can be deserialized via torch.load, triggering arbitrary command execution as the ComfyUI process user.

Detection Guidance

Detecting this vulnerability requires monitoring for suspicious pickle file uploads or deserialization activity. Check ComfyUI logs for POST /upload/image requests or POST /prompt workflows referencing shard_*.pkl files. Look for unexpected Python process execution or command-line arguments containing malicious payloads.

Impact Analysis

This vulnerability can lead to complete system compromise. Attackers could gain full control over the ComfyUI server, steal sensitive data, install malware, or pivot to other systems in the network. Since the attack is remote and requires no authentication, any exposed ComfyUI instance is at high risk.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and security. GDPR mandates appropriate technical measures to ensure data integrity and security. HIPAA requires safeguards against unauthorized access to protected health information. Exploitation could result in data breaches, leading to regulatory fines and legal consequences.

Mitigation Strategies

Immediately upgrade ComfyUI to a patched version if available. Disable unauthenticated upload endpoints like POST /upload/image. Restrict network access to ComfyUI services. Monitor for unauthorized pickle file uploads or suspicious workflow submissions. Consider disabling the LoadTrainingDataset node if not required.

Hi! I’m here to help you understand CVE-2026-68771. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70