Product

ComfyUI (V0.23.0 and Earlier)

1 brief RSS

critical advisory

Unauthenticated Remote Code Execution in ComfyUI via Unsafe Deserialization

1 rule 2 TTPs 1 CVE

ComfyUI version 0.23.0 is vulnerable to unauthenticated remote code execution via unsafe deserialization of malicious pickle files.

PoC ComfyUI +1 remote-code-execution deserialization cve-2026-68771

1r 2t 1c updated 1h ago