Bypass Vulnerability in Hugging Face Diffusers Library
CVE-2026-45804
7.5HIGH
What is CVE-2026-45804?
The Hugging Face Diffusers library prior to version 0.38.0 contains a vulnerability where the DiffusionPipeline.from_pretrained method can bypass the trust_remote_code safeguard. This occurs because the download() function only validates model_index.json and custom pipeline code before loading from a potentially modifiable cached directory. As a result, unauthorized code from a Hub repository can be executed through a custom pipeline flow without requiring explicit parameters. This issue has been addressed in version 0.38.0.
Affected Version(s)
diffusers < 0.38.0