CVE-2026-44827 - Vulnerability Analysis

Overview

Diffusers < 0.38.0 contains a remote code execution caused by improper handling of the custom_pipeline parameter in pipeline_loading_utils.py, letting remote attackers execute arbitrary code by loading malicious Hub repositories, exploit requires loading a malicious repository without trust_remote_code=True.

Severity & Score

Impact

Attackers can execute arbitrary code remotely by loading a malicious model repository, potentially compromising the victim's system.

Mitigation

Update to version 0.38.0 or later.

References

• https://github.com/huggingface/diffusers/security/advisories/GHSA-j7w6-vpvq-j3gm

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner