CPE
high
advisory
Path Traversal in ComfyUI Dataset Save Nodes
2 TTPs 1 CVEComfyUI versions prior to 0.30.0 are vulnerable to path traversal via unsanitized input in dataset save nodes, allowing attackers to write arbitrary files and potentially achieve code execution.
ComfyUI
web-vulnerability
path-traversal
cve-2026-92816
2t
1c
critical
advisory
Unauthenticated Remote Code Execution in ComfyUI via Unsafe Deserialization
1 rule 2 TTPs 1 CVEComfyUI version 0.23.0 is vulnerable to unauthenticated remote code execution via unsafe deserialization of malicious pickle files.
PoC
ComfyUI +1
remote-code-execution
deserialization
cve-2026-68771
1r
2t
1c
updated