CVE-2026-115533

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...

CVE-2026-115533 CVE-2026-115533

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...

EUVD-2026-110078

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...

CVE-2026-115533

The LeRobot library is vulnerable to arbitrary code execution due to unsafe dynamic class instantiation. When the from_pretrained() method or related paths load a policy's processor configuration from a repository, the library utilizes the class field in the JSON configuration to resolve and inst...

CVE-2026-115533

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...

Hugging Face LeRobot deserialization injection vulnerability

A security vulnerability exists in Hugging Face LeRobot versions 0.4.0 through 0.6.1. This vulnerability stems from unsafe dynamic class instantiation in the frompretrained method and related paths. When loading policy processor configurations from a repository, the class field within JSON...

PT-2026-125102

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from pretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...

Hugging Face LeRobot pickle.loads() Code Execution

The vulnerability of the pickle.loads function in the Hugging Face LeRobot library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE

Cybersecurity researchers have disclosed details of a critical security flaw impacting LeRobot, Hugging Face's open-source robotics platform with nearly 24,000 GitHub stars, that could be exploited to achieve remote code execution. The vulnerability in question is CVE-2026-25874 CVSS score: 9.3,...

CVE-2026-25874

LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable...

CVE-2026-25874 LeRobot Unsafe Deserialization Remote Code Execution via gRPC

LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable...

CVE-2026-25874: Deserialization of Untrusted Data

LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable...

PT-2026-36227

Уязвимость функции pickle.loads библиотеки Hugging Face LeRobot связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

LERobot code issue vulnerabilities

Lerobot is a robot programming library open source by Hugging Face. Versions of LeRobot prior to 0.5.1 had code vulnerabilities. These vulnerabilities stemmed from unsafe deserialization in the asynchronous inference pipeline. The pickle.loads function was used to deserialize data received throug...

EUVD-2025-30385

Malicious code in bioql PyPI...

CVE-2025-10772

A vulnerability was identified in huggingface LeRobot up to 0.3.3. Affected by this vulnerability is an unknown functionality of the file lerobot/common/robotdevices/robots/lekiwiremote.py of the component ZeroMQ Socket Handler. The manipulation leads to missing authentication. The attack can onl...

CVE-2025-10772

A vulnerability was identified in huggingface LeRobot up to 0.3.3. Affected by this vulnerability is an unknown functionality of the file lerobot/common/robotdevices/robots/lekiwiremote.py of the component ZeroMQ Socket Handler. The manipulation leads to missing authentication. The attack can onl...

CVE-2025-10772: Missing Authentication for Critical Function

A vulnerability was identified in huggingface LeRobot up to 0.3.3. Affected by this vulnerability is an unknown functionality of the file lerobot/common/robotdevices/robots/lekiwiremote.py of the component ZeroMQ Socket Handler. The manipulation leads to missing authentication. The attack can onl...

LERobot security vulnerabilities

lerobot is a robot programming library open-sourced by Hugging Face. A security vulnerability exists in huggingface LeRobot 0.3.3 and earlier versions, which stems from a lack of authentication in the ZeroMQ Socket Handler component and could lead to an attack within the local network...

CVE-2025-10772

CVE-2025-10772 affects huggingface LeRobot up to 0.3.3. The vulnerability lies in the ZeroMQ Socket Handler’s lekiwi_remote.py, causing missing authentication and enabling local-network access within the affected component. Affected software is LeRobot (up to 0.3.3); the issue is triggered via th...