CVE-2026-44827
Code injection in Huggingface Diffusers
CVSS Skor
8.8
EPSS İhtimal
%0.7
Risk Skoru
0.1
Yayın
5 ay önce
İlgili Siber Güvenlik Haberleri (Newsroom)
Bu zafiyetin basında ve siber güvenlik yayın organlarında yer aldığı makaleler ve analiz bültenleri:
Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
Three high-severity security flaws have been disclosed in Hugging Face's Diffusers library that could allow crafted model repositories to stealthily execute arbitrary code on machines that load it, opening the artificial intelligence (AI) supply chain to security risk. "These vulnerabilities are bypassing trust_remote_code, the safeguard designed to stop unreviewed code from running in the
İlgili Benzer Açıklar
9.8
CVE-2026-25874Deserialization of untrusted data in Huggingface Lerobot
Yama doğrulandı Public Exploits:3EPSS %1
8.0
CVE-2026-5241Policy Bypass in LightGlue Nested Config Resolution in huggingface/transformers
Yama doğrulandıEPSS %1
7.8
CVE-2026-4372Deserialization of untrusted data in Huggingface Transformers
Yama doğrulandı Public Exploits:1EPSS %1
7.5
CVE-2025-6921Uncontrolled resource consumption in Huggingface Transformers
Yama doğrulandı Public Exploits:11EPSS %1
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-44827"