What’s Vulnerable › Products

huggingface diffusers vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your huggingface diffusers version is affected

Latest huggingface diffusers vulnerabilities

• CVE-2026-65920 — Diffusers Path Traversal via weight_map Arbitrary File Read (CVSS 4.3)
• CVE-2026-45804 — Diffusers: TOCTOU Trust Remote Code Bypass (CVSS 7.5)
• CVE-2026-44827 — Diffusers: None.py Trust Remote Code Bypass (CVSS 8.8)
• CVE-2026-44513 — Diffusers: `trust_remote_code` bypass via `custom_pipeline` and local custom components (CVSS 8.8)
• CVE-2025-14922 — Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 7.8)