Huggingface Smolagents vulnerabilities

CVE-2025-5120 [CRITICAL] CWE-94 CVE-2025-5120: A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing att A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution (RCE). The vulnerability stems from the local_python_executor.py module, which inadequately restricts Python code execution despite employing static and dynamic che

CVE-2025-14931 [CRITICAL] CWE-502 Hugging Face smolagents: Unsafe deserialization in Remote Python Executor leads to RCE Hugging Face smolagents: Unsafe deserialization in Remote Python Executor leads to RCE Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication is not required to exploit this vul

CVE-2026-4963 [CRITICAL] CVE-2026-4963: A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function eval A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluate_augassign/evaluate_call/evaluate_with of the file src/smolagents/local_python_executor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to initiate the attack remotely. The exploit has been made av

CVE-2026-2654 [CRITICAL] CWE-918 CVE-2026-2654: A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.g A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The

CVE-2025-9959 [HIGH] CWE-94 CVE-2025-9959: Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execut Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sandbox, enforced by smolagents. The attack requires a Prompt Injection in order to trick the agent to create malicious code.

CVE-2025-11844 [MEDIUM] CWE-643 CVE-2025-11844: Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitization or escaping. This allows an attacker to inject