CVE-2026-45804 — Security Box Score

CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-45804HIGH

huggingface diffusers — Diffusers: TOCTOU Trust Remote Code Bypass

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   R  U  H  H  H    7.5   .0038   30.9     —

AFFECTED
  Product    Versions    Fixed
  diffusers  < 0.38.0 –  —

TIMELINE
  May 13  Reserved by GitHub_M
  Jul 15  EXPLOIT PUBLISHED — CVE-2026-45804 (huggingface diffusers). Public exploit reference added.
  Jul 15  Published (CNA: GitHub_M)

CWE-367 · CNA: GitHub_M · CVSS v3.1 · 5 references · NVD status: Analyzed

Description

Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPipeline.from_pretrained flow can bypass the trust_remote_code guard because download() validates model_index.json and custom pipeline code before later loading from a cached folder that can change, allowing a Hub repository with custom .py pipeline code to execute through the custom pipeline flow without passing custom_pipeline or trust_remote_code=True. This issue is fixed in version 0.38.0.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
May 13, 2026	Reserved	Reserved by GitHub_M
July 15, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2026-45804 (huggingface diffusers). Public exploit reference added.
July 15, 2026	Published	Published (CNA: GitHub_M)

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
huggingface	diffusers	—	< 0.38.0	—

Weaknesses

CWE-367

References (5)

https://github.com/huggingface/diffusers/commit/a37f6f8394ac2a7ee8360c3abea811efe54512b1 [Patch]
https://github.com/huggingface/diffusers/issues/13446 [Issue Tracking, Exploit]
https://github.com/huggingface/diffusers/pull/13448 [Issue Tracking]
https://github.com/huggingface/diffusers/releases/tag/v0.38.0 [Release Notes]
https://github.com/huggingface/diffusers/security/advisories/GHSA-7wx4-6vff-v64p [Vendor Advisory, Exploit]

Authoritative record: CVE-2026-45804 at cve.org

Vendors: huggingface

Weaknesses: CWE-367

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-45804 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.