Add diffusers ACE PoC

README.md

@@ -0,0 +1,10 @@
+# diffusers convert_from_ckpt() ACE PoC
+
+`download_from_original_stable_diffusion_ckpt()` in
+`diffusers/pipelines/stable_diffusion/convert_from_ckpt.py` calls
+`torch.load()` WITHOUT `weights_only` parameter.
+
+On PyTorch <2.6: defaults to `weights_only=False` = ACE
+On PyTorch 2.6+: defaults to `True` but error message guides users to set False
+
+Also affects `download_controlnet_from_original_ckpt()` with same pattern.

malicious_sd_v15.ckpt

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5d94dc5e550ee71a41dc04aa4d8a47bdd2018391f4c8566893b2836e5f32076c
+size 47912