{"data":{"id":"24dbaa12-6390-459f-85e2-fc849f8e1f84","title":"Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code","summary":"Three high-severity security flaws were found in Hugging Face's Diffusers library (a Python package for generating images, videos, and audio) that could allow attackers to execute arbitrary code (running any commands they want) when loading model repositories, bypassing the trust_remote_code safeguard (a security check meant to prevent unreviewed code from running). These vulnerabilities, collectively called FaceHugger, exploit a timing weakness in how the library downloads and checks models in two separate steps instead of one atomic operation (a single indivisible action).","solution":"The vulnerabilities were addressed in Diffusers version 0.38.0, released in early May 2026. If immediate patching is not an option, the project maintainers recommended: Only call from_pretrained with pretrained_model_name_or_path, custom_pipeline, and local snapshot directories from fully trusted sources that have been audited, and do not pass custom_pipeline= pointing to untrusted locations.","labels":["security"],"sourceUrl":"https://thehackernews.com/2026/08/hugging-face-diffusers-flaws-could-let.html","publishedAt":"2026-08-03T06:40:31.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["supply_chain"],"issueType":"news","affectedPackages":null,"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["Hugging Face","Diffusers"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-08-03T06:40:31.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}