CVE catalog

CVE-2026-44827

Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, diffusers 0.37.0 allows remote code execution without the trust_remote_code=True safeguard when loading pipelines from Hug

[CVE catalog]

Severity
High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.72% · Oct 25, 2026

A flaw was found in Diffusers, a library for pretrained diffusion models. A remote attacker could exploit this vulnerability by publishing a malicious model repository containing a specially crafted file. When a victim loads a pipeline from the Hugging Face Hub repository, the malicious file is automatically downloaded and executed, bypassing a security safeguard. This could lead to silent arbitrary code execution on the victim's system. diffusers: Diffusers: Arbitrary Code Execution via malicious model loading The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
CpediffusersNot reported0.38.0fixed
CpediffusersNot reported0.38.0fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
CpediffuserscpeNot reported0.38.0Not reportedNot reportedNot reported
CpediffuserscpeNot reported0.38.0Not reportedNVD-CVE-2026-44827Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [Red Hat security advisories and VEX]