Hugging Face LeRobot pickle.loads() Code Execution

The vulnerability of the pickle.loads function in the Hugging Face LeRobot library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2026-36227

Уязвимость функции pickle.loads библиотеки Hugging Face LeRobot связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

lerobot 安全漏洞

lerobot is a robot programming library open-sourced by Hugging Face. A security vulnerability exists in huggingface LeRobot 0.3.3 and earlier versions, which stems from a lack of authentication in the ZeroMQ Socket Handler component and could lead to an attack within the local network...