Product

ComfyUI (0.23.0)

1 brief RSS

critical advisory

Unauthenticated Remote Code Execution in ComfyUI via Unsafe Deserialization

1 rule 2 TTPs 1 CVE

ComfyUI version 0.23.0 is vulnerable to unauthenticated remote code execution via unsafe deserialization of malicious pickle files.

ComfyUI remote-code-execution deserialization cve-2026-68771

1r 2t 1c 5m ago