CVE-2026-44827
1 advisory.
PyPI/diffusers CVE-2026-44827: high 8.8
Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, diffusers 0.37.0 allows remote code execution without the trust_remote_code=True safeguard when loading pipelines from Hugg
Action: Upgrade diffusers to 0.38.0 or later.
pip install diffusers==0.38.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.38.0 | - |
Fixed versions
| 0.38.0 |
Sources
CVE-2026-44827 · published · modified · JSON