MEDIUMVulnerability
Global

Bugs in Hugging Face Diffusers Bypass Custom Code Safeguard

·Source: Infosecurity Magazine

Updated:

Executive Summary

Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it

Analysis

Three CVEs in Hugging Face diffusers let a malicious model repo run code on any machine that loads it
Source Attribution

Originally published by Infosecurity Magazine on Jul 28, 2026.

Related Threats