HomeCVE Intelligence › CVE-2026-45804
CVSS 7.5 HIGH Vulnerability

CVE-2026-45804: Diffusers: TOCTOU Trust Remote Code Bypass

Background This vulnerability is found in the diffusers package the transformers-equivalent library for diffusion models. It is found in the DiffusionPipeline.from_pretrained flow, which is used to load a pipeline from…

7.5CVSS Score
HIGHSeverity
NOCISA KEV
VulnerabilityImpact Type

📋 Vulnerability Details

CVE IDCVE-2026-45804
Vendorpip
Affected Productdiffusers
Vulnerability TypeVulnerability
CVSS Score7.5 (HIGH)
Actively Exploited❌ No known exploitation
Patch StatusSee Vendor Advisory →
Reported ByCYBERDUDEBIVASH SENTINEL APEX Intelligence (via github_advisories)

🔬 Technical Analysis

#

Background This vulnerability is found in the diffusers package - the transformers-equivalent library for diffusion models. It is found in the DiffusionPipeline.from_pretrained flow, which is used to load a pipeline from the HuggingFace Hub. This function has a trust_remote_code guard: if the repository’s model_index.json references a custom pipeline class defined in a .py file in the repo, the load is blocked unless trust_remote_code=True is explicitly passed: ``

ValueError: The repository for attacker/repo contains custom code in pipeline.py which must be executed to correctly load the model. You can inspect the repository content at https://hf.co/attacker/repo/blob/main/pipeline.py. Please pass the argument trust_remote_code=True to allow custom code to be run. `` T

🎯 Known Indicators of Compromise

{"type":"url","value":"https://hf.co/attacker/repo/blob/main/pipeline.py.","confidence_score":0.82,"first_seen":"2026-05-20","source_count":1}

📚 Advisory References

⚡ DETECTION RULES AVAILABLE

Get CVE-2026-45804 Detection Pack

Sigma rules, YARA signatures, IOC table, and SIEM queries for Splunk, Elastic, Sentinel, and Chronicle — deployable in 5 minutes.

✓ Sigma Rules ✓ YARA Pack ✓ IOC Table ✓ SIEM Queries
🛡️ Get Detection Pack → 🔌 Access via API →

🔗 Related Intelligence