Hugging Face Patches Diffusers Flaw Enabling Arbitrary Code Execution

Hugging Face's Transformers is an open-source library widely used to download, load and deploy AI models. CVE-2026-4372 affects the way model configuration files are processed. An attacker who tricks a developer into loading a malicious config.json file could remotely execute code on the system, posing a high risk to AI model supply chains and development environments.

Security researchers disclosed in 2026 that a specially crafted config.json file could bypass existing Transformers security controls, affecting multiple previous versions. Hugging Face subsequently released Transformers 5.3.0 to patch the vulnerability. Organizations and developers using the library should upgrade to version 5.3.0 or later and avoid loading models or configuration files from unknown sources.

OpenAI launched Privacy Filter, an open-weight model designed to detect and redact personal information in text, on April 22, 2026, and released it on Hugging Face at the same time. Attackers copied the official name and model description, highlighting how malicious actors can exploit platform rankings and download counts to manufacture trust in the open-source AI supply chain and trick developers into introducing malware when running model scripts.

HiddenLayer disclosed on May 7, 2026, that the Open-OSS/privacy-filter repository had topped Hugging Face's trending chart within 18 hours before being removed after about 244,000 downloads. Its loader.py downloaded a Rust-based infostealer on Windows that stole browser credentials and cryptocurrency wallet data. Affected users should isolate and reimage their systems, replace credentials, and transfer their crypto assets.