CVE-2025-11844-smolagents
| Reporter | Title | Published | Views | Family All 18 |
|---|---|---|---|---|
 | XPath Injection in search_item_ctrl_f Function - Hugging Face Smolagents v1.20.0 | 16 Jul 202521:46 | ā | huntr |
 | Exploit for XPath Injection in Huggingface Smolagents | 29 May 202607:35 | ā | githubexploit |
 | The vulnerability of the search_item_ctrl_f() function in the src/smolagents/vision_web_browser.py file of the Hugging Face Smolagents autonomous AI agent framework allows a intruder to gain unauthorized access to protected information. | 1 Dec 202500:00 | ā | bdu_fstec |
 | CVE-2025-11844 | 22 Oct 202515:50 | ā | circl |
 | Hugging Face Transformers å®å Øę¼ę“ | 22 Oct 202500:00 | ā | cnnvd |
 | CVE-2025-11844 | 22 Oct 202513:13 | ā | cve |
 | CVE-2025-11844 XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function | 22 Oct 202513:13 | ā | cvelist |
 | EUVD-2025-35361 | 22 Oct 202515:31 | ā | euvd |
 | Hugging Face Smolagents XPath injection vulnerability in the search_item_ctrl_f function | 22 Oct 202515:31 | ā | github |
 | CVE-2025-11844 | 22 Oct 202514:15 | ā | nvd |
10
Data
Build on a solid foundation withĀ Vulners data
WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data
Api
Power your application withĀ Vulners API
The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access
App
Assess and manage vulnerabilities withĀ VulnersĀ tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
24 Aug 2026 20:52Current
CVSS 35.4
EPSS0.0026
SSVC