{
  "schema_version": "1.6.0",
  "id": "ACVE-2026-0419",
  "aliases": [],
  "modified": "2026-09-20T00:00:00Z",
  "summary": "Exposed ComfyUI servers were compromised by the Pickai backdoor",
  "details": "## What\n\nPickai activity targeted exposed ComfyUI image-generation servers and installed a C++ backdoor with reverse-shell and AI-data theft capabilities. The public coverage reports at least 695 compromised servers. The record is an exposure-conditioned incident row, not a claim that every ComfyUI installation is vulnerable.\n\n## Which configuration is exposed\n\nThe exposed configuration is a ComfyUI service reachable from the internet while known remote-code or file-processing paths remain available. A local private service is outside the static condition even when it has the same product version.\n\n## How ACVE detects it\n\nACVE matches the discovered comfyui.exposed feature. Discovery does not scan ports, validate the vulnerable endpoint, or read image data. Operators must supply the feature through a trusted lock enrichment or review.\n\n## Fix\n\nPatch ComfyUI and related plugins, bind the service privately, require authentication, and inspect for backdoors and reverse-shell persistence. Rotate AI-service and cloud credentials present on affected hosts.\n\n## Grounding needed\n\nThe incident page should be checked for the compromised-server count and date range. The product is represented as an exposed configuration because the named package release is not supplied by the source.\n\nThis record is limited to the condition named in the public source: Exposed ComfyUI servers were compromised by the Pickai backdoor. A match is a review signal for that condition, not a claim that every installation, package, model, or host was compromised. Operators should preserve the resolved evidence and investigate adjacent credentials, network exposure, and execution history before closing the finding. The result should be retained with the lock snapshot used for the match so later review can distinguish configuration drift from a changed public record.",
  "affected": [
    {
      "package": {
        "ecosystem": "AgentHarness",
        "name": "comfyui"
      },
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            }
          ]
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "CRITICAL",
    "acve": {
      "specVersion": 1,
      "status": "candidate",
      "kind": "code",
      "vulnClasses": [
        "exposed-surface",
        "command-injection",
        "credential-theft"
      ],
      "cwe": [
        "CWE-522"
      ],
      "exploitation": {
        "status": "exploited-itw",
        "checkedAt": "2026-09-20T00:00:00Z",
        "sources": [
          {
            "url": "https://cybersecuritynews.com/hackers-exploit-comfyui-700-ai-image-generation-servers/",
            "type": "dfir"
          }
        ],
        "kev": {
          "listed": false
        },
        "victims": {
          "count": 695,
          "range": "at least 695 compromised servers",
          "sectors": [
            "technology"
          ],
          "evidence": "The cited XLab coverage reported compromised ComfyUI servers and a backdoor."
        },
        "attribution": "Pickai"
      },
      "cveBoundary": "exposed-surface",
      "matcher": {
        "field": "features[\"comfyui.exposed\"]",
        "op": "eq",
        "value": true
      },
      "fix": {
        "summary": "Patch ComfyUI and bind the service behind authentication.",
        "actions": [
          {
            "type": "reconfigure",
            "target": "features[\"comfyui.exposed\"]",
            "to": "false",
            "why": "Remove public exposure."
          },
          {
            "type": "reconfigure",
            "target": "surface",
            "to": "authenticated",
            "why": "Restrict image-generation service access."
          }
        ]
      },
      "noCveReason": "No CVE assigned; this record describes a configuration or supply-chain condition.",
      "grounding": {
        "itw": {
          "checkedAt": "2026-09-20T16:17:46Z",
          "sources": [
            {
              "url": "https://cybersecuritynews.com/hackers-exploit-comfyui-700-ai-image-generation-servers/",
              "status": 200,
              "contentType": "text/html; charset=UTF-8",
              "sha256": "sha256:18091610338cd817af4f91ac1089681802cfa2af0177574faea6f6cccd6607d2",
              "type": "dfir"
            }
          ],
          "kev": {
            "listed": false
          }
        }
      }
    }
  }
}