Skip to content
Threat Feed

Tag

Diffusers

1 brief RSS
high advisory

Hugging Face Diffusers Remote Code Execution via None.py

A remote code execution vulnerability exists in Hugging Face diffusers versions prior to 0.38.0 allowing arbitrary code execution through the `custom_pipeline` flow via a `None.py` file in a Hugging Face Hub repository, bypassing trust checks.

diffusers rce huggingface
2r 1t