Remote Code Execution Vulnerability in Diffusers Library by Hugging Face
CVE-2026-44827

8.8HIGH

Key Information:

Vendor

Huggingface

Status
Diffusers
Vendor
CVE Published:
14 May 2026

What is CVE-2026-44827?

The Diffusers library prior to version 0.38.0 contains a vulnerability that allows for remote code execution due to improper handling of user input in the pipeline loading process. When the custom_pipeline parameter is not specified, it defaults to None, leading to potential exploitation. An attacker could craft a malicious Hub repository with a Python file named None.py, which, when invoked by a victim using the DiffusionPipeline.from_pretrained() function, could result in arbitrary code execution without adequate safeguards in place. This exploitation route circumvents trust_remote_code checks, allowing attackers to execute harmful code silently. The issue has been addressed in version 0.38.0.

Affected Version(s)

diffusers < 0.38.0

References

https://github.com/huggingface/diffusers/security/advisor...
x_refsource_CONFIRM

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.