SB20261110274 - Unsafe reflection in Diffusers

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20261110274

SB20261110274 - Unsafe reflection in Diffusers

Published: November 10, 2026

Security Bulletin ID SB20261110274
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Medium 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Unsafe reflection (CVE-ID: N/A)

CWE-ID: CWE-470 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')

CVSSv4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a remote attacker to execute arbitrary code with the victim's privileges when loading a malicious Diffusers repository.

The vulnerability exists due to externally controlled module selection in Diffusers model loading when component library names reach importlib.import_module() or requirements keys reach importlib.util.find_spec() without validation. A remote attacker can entice a victim to load a crafted local repository using from_pretrained(), with the repository importable from a sys.path root, to execute bundled Python code even with trust_remote_code=False and DIFFUSERS_DISABLE_REMOTE_CODE=1.


Remediation

Install update from vendor's website.

References