CVE-2026-45804
High
Description
Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPipeline.from_pretrained flow can bypass the trust_remote_code guard because download() validates model_index.json and custom pipeline code before later loading from a cached folder that can change, allowing a Hub repository with custom .py pipeline code to execute through the custom pipeline flow without passing custom_pipeline or trust_remote_code=True. This issue is fixed in version 0.38.0.
SeverityHigh
CVSS7.5
Exploit probability—
ProductHuggingface Diffusers
PublishedJul 15, 2026
First seenJul 15, 2026
Weakness typeCWE-367CWE-367
How to fix
Update
- huggingface diffusers0.38.0 or later
- diffusers0.38.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huggingface diffusers | v < 0.38.0 | 0.38.0 |
| diffusersPyPI | v < 0.38.0 | 0.38.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.