Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2026-45804: Diffusers library may run untrusted code
CVE-2026-45804 · published 3 months ago
Summary
If you use the Diffusers library version earlier than 0.38.0, a model downloaded from the online hub can execute custom Python code even when you haven’t explicitly allowed it. This could let an attacker run unwanted code on your system. Upgrade Diffusers to version 0.38.0 or newer to restore the safety check.
What to do
- Update the hugging face team (past and future) with the help of all our contributors (https://github.com/huggingface/diffusers/graphs/contributors) diffusers to version 0.38.0.
- Update huggingface diffusers to version 0.38.0 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | huggingface | diffusers | < 0.38.0 |
| pip | the hugging face team (past and future) with the help of all our contributors (https://github.com/huggingface/diffusers/graphs/contributors) | diffusers |
< 0.38.0 Fix: upgrade to 0.38.0
|
Original advisory text
Diffusers: TOCTOU Trust Remote Code Bypass
Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPipeline.from_pretrained flow can bypass the trust_remote_code guard because download() validates model_index.json and custom pipeline code before later loading from a cached folder that can change, allowing a Hub repository with custom .py pipeline code to execute through the custom pipeline flow without passing custom_pipeline or trust_remote_code=True. This issue is fixed in version 0.38.0.
References
- https://github.com/huggingface/diffusers/releases/tag/v0.38.0 URL
- https://github.com/advisories/GHSA-7wx4-6vff-v64p
- https://github.com/huggingface/diffusers/commit/a37f6f8394ac2a7ee8360c3abea811ef... Patch
- https://github.com/huggingface/diffusers/issues/13446 Third Party Advisory
- https://github.com/pypa/advisory-database/tree/main/vulns/diffusers/PYSEC-2026-2...
- https://nvd.nist.gov/vuln/detail/CVE-2026-45804 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45804... Vendor Advisory
- https://github.com/huggingface/diffusers/pull/13448 Patch
- https://github.com/huggingface/diffusers/security/advisories/GHSA-7wx4-6vff-v64p Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition
Timeline
Published15 Jul 2026
Updated4 Nov 2026
First seen20 May 2026
Track software like this
Free during beta