An unauthenticated remote code execution vulnerability in ComfyUI allows attackers to execute arbitrary commands via malicious pickle file uploads.

The application improperly deserializes user-supplied pickle files within the LoadTrainingDataset node. This vulnerability is accessible to unauthenticated attackers who can upload a crafted file and trigger a workflow execution.

A successful exploit grants the attacker full control over the process running ComfyUI, leading to potential system compromise, data theft, or lateral movement within the network. Given the CVSS score of 9.8, this represents a critical risk requiring immediate attention.

Immediate Action: Update ComfyUI to the latest version that incorporates the necessary security patches for deserialization handling.

Proactive Monitoring: Review web server access logs for suspicious POST requests to the /upload/image or /prompt endpoints.

Compensating Controls: Implement strict network segmentation for the ComfyUI instance and utilize a Web Application Firewall to block unauthorized file uploads and anomalous payload structures.

Public Exploit Available: Unknown

This vulnerability poses a severe threat due to the ease of remote exploitation and the high level of impact. Administrators should prioritize updating the software immediately and ensure that instances are not exposed to untrusted networks.