Executive Summary
Three high-severity Hugging Face Diffusers flaws let crafted model repositories run code when loaded, bypassing the trust_remote_code safeguard.
What Happened
Three high-severity security flaws have been disclosed in Hugging Face's Diffusers library that could allow crafted model repositories to stealthily execute arbitrary code on machines that load it, opening the artificial intelligence (AI) supply chain to security risk. "These vulnerabilities are bypassing trust_remote_code, the safeguard designed to stop unreviewed code from running in the
Affected Products
- Hugging Face Diffusers
Vulnerability / Attack Technique
Malicious model repositories bypassing trust_remote_code
Technical Mechanism
As reported, the safeguard meant to block remote code could be bypassed.
AI Security Category
LLM03:2025 Supply Chain
Part of the AI Supply Chain and AI SBOM topic.
Relevant Frameworks
RealGround Analysis
trust_remote_code=False was not a guarantee. RealGround analysis: update Diffusers and load only vetted repositories.
Recommended Controls
- Update Diffusers
- Load models from internal mirrors
Related RealGround Service
AI Agent SBOM and LLM Mapping · or start with the free AI Agent Security Scanner.
Sources
thehackernews.com: https://thehackernews.com/2026/08/hugging-face-diffusers-flaws-could-let.html
Summary and analysis written by RealGround from the source above; last updated 2026-10-18.