The vulnerability of the pickle.loads() function in the Hugging Face LeRobot library, which allows a hacker to execute arbitrary code.

The vulnerability of the pickle.loads function in the Hugging Face LeRobot library is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

lerobot 安全漏洞

lerobot is a robot programming library open-sourced by Hugging Face. A security vulnerability exists in huggingface LeRobot 0.3.3 and earlier versions, which stems from a lack of authentication in the ZeroMQ Socket Handler component and could lead to an attack within the local network...