CVE-2026-44827

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

July 28, 2026

Last Seen

July 29, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Hugging Face Diffusers Vulnerabilities Enable Code Execution Attacks70.5

Zafran Labs identified high-severity vulnerabilities in Hugging Face's diffusers library, allowing malicious model repositories to execute arbitrary code on client machines. The vulnerabilities bypass the trust_remote_code safeguard, which is intended to prevent unreviewed code execution. Hugging Fa...