GHSA-7wx4-6vff-v64p: Diffusers: TOCTOU Trust Remote Code Bypass
Summary
The `diffusers` package has a TOCTOU (time-of-check-time-of-use, where a security check happens at one moment but the actual data used comes from a different moment) vulnerability in its `DiffusionPipeline.from_pretrained` function that loads models from HuggingFace Hub. An attacker can bypass the `trust_remote_code` security check by updating a repository between two separate download calls, allowing arbitrary code to execute without the user explicitly approving it.
Vulnerability Details
EPSS: 0.0%
Yes
May 20, 2026
Classification
Affected Vendors
Affected Packages
Related Issues
Original source: https://github.com/advisories/GHSA-7wx4-6vff-v64p
First tracked: May 20, 2026 at 02:00 PM
Classified by LLM (prompt v3) · confidence: 95%