Quick answers
- Is CVE-2026-68771 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-68771 being exploited in the wild.
- How severe is CVE-2026-68771?
- Critical severity, with a CVSS score of 9.8, published 31 July 2026.
- Which products and versions are affected?
- Comfy-Org ComfyUI <= 0.23.0.
- Is there a fix for CVE-2026-68771?
- A patch was published on 2026-06-18: Fix merged into master branch via PR 14543 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-68771 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2026-68771?
- Check whether you run Comfy-Org ComfyUI at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
An unsafe deserialization vulnerability (CWE-502) exists in the LoadTrainingDataset node of ComfyUI due to the use of torch.load() without the weights_only=True restriction. An unauthenticated attacker can exploit this by first uploading a malicious pickle file (e.g., shard_*.pkl) via the /upload/image endpoint. Subsequently, the attacker can trigger the deserialization of this file by submitting a crafted workflow graph to the /prompt endpoint. The vulnerability leverages the Python __reduce__ method within the pickle payload to achieve arbitrary code execution as the user running the ComfyUI process. The issue is fixed in commit 94ee49b by enforcing weights_only=True during dataset loading.
Affected products
- Comfy-Org ComfyUI <= 0.23.0
Timeline
- 2026-06-18: patched: Fix merged into master branch via PR 14543
- 2026-07-31: disclosed: NVD publication date