Forensic Summary
Three high-severity vulnerabilities in Hugging Face's Diffusers library — collectively dubbed FaceHugger — allow crafted model repositories to execute arbitrary code even when the trust_remote_code safeguard is explicitly disabled. The flaws exploit a TOCTOU race condition in the library's two-phase model loading process, meaning the security gate only inspects the first HTTP request while a malicious payload can be injected via the second. With over 8.1 million downloads in July 2026 alone, the attack surface spans enterprise production pipelines, CI/CD systems, and container images globally.
Read the full technical deep-dive on Grid the Grey: https://gridthegrey.com/posts/cve-2026-44827-hugging-face-diffusers-rce-bypasses-trust-gate/
Top comments (0)