CVE-2026-115533

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...

EUVD-2026-110078

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...

CVE-2026-115533 CVE-2026-115533

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...

CVE-2026-115533

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...

CVE-2026-115533

The LeRobot library is vulnerable to arbitrary code execution due to unsafe dynamic class instantiation. When the from_pretrained() method or related paths load a policy's processor configuration from a repository, the library utilizes the class field in the JSON configuration to resolve and inst...

PT-2026-125102

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from pretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...

Hugging Face LeRobot deserialization injection vulnerability

A security vulnerability exists in Hugging Face LeRobot versions 0.4.0 through 0.6.1. This vulnerability stems from unsafe dynamic class instantiation in the frompretrained method and related paths. When loading policy processor configurations from a repository, the class field within JSON...

CVE-2026-79784

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiateclass in vocos/pretrained.py takes the classpath value from the configuration, splits it into a module and an attribute, imports the module with import, resolves the attribute with...

CVE-2026-79784 Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configuration

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiateclass in vocos/pretrained.py takes the classpath value from the configuration, splits it into a module and an attribute, imports the module with import, resolves the attribute with...

EUVD-2026-65542

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiateclass in vocos/pretrained.py takes the classpath value from the configuration, splits it into a module and an attribute, imports the module with import, resolves the attribute with...

CVE-2026-79784: Use of Externally-Controlled Input to Select Classes or Code

Vocos instantiates a class named by a configuration file without restricting which class may be named. instantiateclass in vocos/pretrained.py takes the classpath value from the configuration, splits it into a module and an attribute, imports the module with import, resolves the attribute with...

CVE-2026-44513

A flaw was found in Diffusers, a library for pretrained diffusion models. A remote attacker could exploit a bypass in the trustremotecode mechanism within the DiffusionPipeline.frompretrained function. This vulnerability allows for arbitrary remote code execution, even when the user explicitly se...

Diffusers: TOCTOU Trust Remote Code Bypass

Background This vulnerability is found in the diffusers package - the transformers-equivalent library for diffusion models. It is found in the DiffusionPipeline.frompretrained flow, which is used to load a pipeline from the HuggingFace Hub. This function has a trustremotecode guard: if the...