CVE-2026-68771_exploit

CVE-2026-68771 — ComfyUI 認証不要ピクルス逆シリアライゼーション RCE ComfyUI における LoadTrainingDataset ノードを介した認証不要のリモートコード実行。 LoadTrainingDataset.execute は、サーバーの出力ディレクトリからデータセットシャードを torch.loadf で読み込み、weightsonly=True を指定しません。PyTorch /tmp/pwned' コマンドはサーバー上 で実行されます。その出力は返されないため、結果を確認するには --shell でリバース...

Exploit for CVE-2026-68771

CVE-2026-68771 — ComfyUI: Unauthenticated RCE via Insecure Des...

Exploit for CVE-2026-68771

CVE-2026-68771 — ComfyUI Unauthenticated Pickle Deserializatio...

CVE-2026-68771

ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard.pkl file via...

CVE-2026-68771

Technical details about this CVE are not publicly available in the provided documents. Monitor for updates from the vendor and CVE databases for affected versions, impact, and remediation.

CVE-2026-68771 ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization

ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard.pkl file via...

CVE-2026-68771: Deserialization of Untrusted Data

ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard.pkl file via...