AINewsnow

CVE-2026-68771 – Unauthenticated RCE in ComfyUI via Insecure Deserialization in the LoadTrainingDataset Node

This story is from 2026-10-03. It is preserved in the archive; the latest stories are on the live feed.

Overview Field Value CVE ID CVE-2026-68771 Affected ComfyUI ≤ v0.23.0 Weakness CWE-502 (Deserialization of Untrusted Data) CVSS 3.1 9.8 (Critical) – AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Authentication required None Fix PR #14543, commit 94ee49b ComfyUI is a popular open-source node-graph GUI/backend…

Read the full story at DEV Community — AI ↗

Timeline · 1 report

  1. 2026-10-03 01:45 · DEV Community — AI
    CVE-2026-68771 – Unauthenticated RCE in ComfyUI via Insecure Deserialization in the LoadTrainingDataset Node

More stories

  1. NVIDIA DGX Spark 64GB Gives Developers More Ways to Build and Scale Local AI — NVIDIA Blog
  2. Gemini 4 Argon: our next era of frontier intelligence — Google Gemini Blog
  3. Guided Vision in Gemini Live: built for accessibility — Google Gemini Blog
  4. Google tests its plan for AI data centers in space with Project Suncatcher — Scientific American
  5. Google announces Gemini 4 Argon AI model, but you can't use it yet — Ars Technica AI
  6. Tavus unveils Griffin, the "first Human Interaction Model", which it says passed the "video Turing test", with 48% of users thinking it was human in live chats (@tavus) — Techmeme
  7. Introducing Clef: our open-source decision models, and new RL fine-tuning platform — Cloudflare Blog — AI
  8. The latest AI news we announced in September 2026 — Google Gemini Blog

Get the daily brief of stories like this at 6:30 every morning →