Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

Three high-severity security flaws were found in Hugging Face's Diffusers library (a Python package for generating images, videos, and audio) that could allow attackers to execute arbitrary code (running any commands they want) when loading model repositories, bypassing the trust_remote_code safeguard (a security check meant to prevent unreviewed code from running). These vulnerabilities, collectively called FaceHugger, exploit a timing weakness in how the library downloads and checks models in two separate steps instead of one atomic operation (a single indivisible action).