Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

Security flaws have been found in Hugging Face's Diffusers library, which could allow malicious model repositories to execute arbitrary code on machines that load them. These vulnerabilities can bypass a safeguard meant to prevent unreviewed code from running, posing a security risk to the artificial intelligence supply chain. The flaws are considered high-severity and could be exploited by crafted model repositories. This vulnerability could enable stealthy execution of arbitrary code, compromising the security of systems that use the library. The issue highlights a potential weakness in the trust_remote_code safeguard. The vulnerabilities could have significant implications for the security of the AI supply chain.