download_from_original_stable_diffusion_ckpt() in diffusers/pipelines/stable_diffusion/convert_from_ckpt.py calls torch.load() WITHOUT weights_only parameter.

On PyTorch <2.6: defaults to weights_only=False = ACE On PyTorch 2.6+: defaults to True but error message guides users to set False

Also affects download_controlnet_from_original_ckpt() with same pattern.