1777 matches found
EUVD-2026-51652
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard.pkl file via...
CVE-2026-68771
Technical details about this CVE are not publicly available in the provided documents. Monitor for updates from the vendor and CVE databases for affected versions, impact, and remediation.
CVE-2026-68771 ComfyUI 0.23.0 Unauthenticated RCE via LoadTrainingDataset Pickle Deserialization
ComfyUI v0.23.0 contains an unsafe deserialization vulnerability in the LoadTrainingDataset node that allows unauthenticated remote attackers to execute arbitrary Python code by uploading a crafted pickle file and triggering its deserialization. Attackers can upload a malicious shard.pkl file via...
CVE-2026-15976
SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load..., weightsonly=False fallback enables pickle deserialization of .bin files...
CVE-2026-15969 CVE-2026-15969
SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...
EUVD-2026-51267
SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...
CVE-2026-15969 CVE-2026-15969
SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...
CVE-2026-15969
SGLang (CVE-2026-15969) exposes an unauthenticated RCE via /load_lora_adapter_from_tensors caused by bypassing SafeUnpickler’s incomplete denylist, enabling arbitrary command execution through crafted base64-encoded pickle payloads. Multiple sources confirm the vulnerability and its impact on SGL...
EUVD-2026-51264
SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load..., weightsonly=False fallback enables pickle deserialization of .bin files...
CVE-2026-15976
CVE-2026-15976 affects SGLang. The vulnerability is an RCE that occurs when loading model weights from a HuggingFace repository via the /update_weights_from_disk path, where torch.load(..., weights_only=False) may deserialize pickle payloads from .bin files. This is tied to the pickle-deserializa...
CVE-2026-15976 CVE-2026-15976
SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load..., weightsonly=False fallback enables pickle deserialization of .bin files...
CVE-2026-15976 CVE-2026-15976
SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load..., weightsonly=False fallback enables pickle deserialization of .bin files...
PT-2026-66558
SGLang contains an unauthenticated RCE in /load lora adapter from tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...
PT-2026-66561
SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update weights from disk, where torch.load..., weights only=False fallback enables pickle deserialization of .bin files...
EUVD-2026-41089
Ray: Arbitrary code execution via ray.data.readwebdataset default decoder: pickle.loadsvalue and torch.loadweightsonly=False...
GHSA-HHRP-GW25-JR43 Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
Summary ray.data.readwebdatasetpaths=... is a @PublicAPIstability="alpha" reader for WebDataset-format TAR files. Its default decoder=True invokes defaultdecoder on every sample's keys, which routes file extension to a decoder by extension. Two of those branches deserialize attacker-controlled...
CVE-2026-63767
ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket bound to all interfaces. Attackers can...
CVE-2026-63767 ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ
ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket bound to all interfaces. Attackers can...
CVE-2026-63767
CVE-2026-63767 affects ktransformers up to version 0.6.3. It describes an unauthenticated pickle deserialization vulnerability that allows an attacker to execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket exposed on all interfaces. The exploit h...
CVE-2026-63767 ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ
ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that allows remote attackers to execute arbitrary commands by sending crafted pickle payloads to the SchedulerServer ZMQ ROUTER socket bound to all interfaces. Attackers can...