122 matches found
CVE-2025-11844-smolagents
🔐 Smolagents XPath Injection Simulation Framework CVE-2025-11844 An educational auditing sandbox and dynamic proof-of-concept scanner demonstrating the XPath Injection vulnerability found within Hugging Face's smolagents library up to version 1.2.0. 🔍 Vulnerability Profile Metric| Details ---|---...
EUVD-2025-26607
Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sandbox, enforced by smolagents. The attack requires a Prompt Injection in order to trick the agent to create malicious code...
PYSEC-2026-3066 Hugging Face Smolagents has an Injection issue
A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluateaugassign/evaluatecall/evaluatewith of the file src/smolagents/localpythonexecutor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to...
Hugging Face Smolagents has an Injection issue
A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluateaugassign/evaluatecall/evaluatewith of the file src/smolagents/localpythonexecutor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to...
agentengine (>=0.1.5, <=0.1.8), cuzco (0.1.0.dev1) +16 more potentially affected by CVE-2026-4963 via smolagents (>=1.8.1, <=1.24.0)
smolagents PYPI version =1.8.1, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.16.0, =1.4.0, =0.0.1.dev0, =0.1.2 and more Source cves: CVE-2026-4963 Source advisory: OSV:PYSEC-2026-3066...
sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2026-4963 via smolagents (0.1.3)
smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2026-4963 Source advisory: OSV:PYSEC-2026-3066...
PYSEC-2026-3067 Hugging Face Smolagents has a Server-Side Request Forgery issue
A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...
Hugging Face Smolagents has a Server-Side Request Forgery issue
A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...
agentengine (>=0.1.5, <=0.1.8), cuzco (0.1.0.dev1) +16 more potentially affected by CVE-2026-2654 via smolagents (>=1.8.1, <=1.24.0)
smolagents PYPI version =1.8.1, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.1.0, =0.16.0, =1.4.0, =0.0.1.dev0, =0.1.2 and more Source cves: CVE-2026-2654 Source advisory: OSV:PYSEC-2026-3067...
sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2026-2654 via smolagents (0.1.3)
smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2026-2654 Source advisory: OSV:PYSEC-2026-3067...
PT-2026-59686
A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made...
agentengine (>=0.1.5, <=0.1.8), deepmost (0.5.2) +13 more potentially affected by CVE-2025-11844 via smolagents (>=1.8.1, <=1.21.1)
smolagents PYPI version =1.8.1, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.16.0, =1.4.0, =0.0.1.dev0, =0.0.1, =0.3.0, =0.3.7 Source cves: CVE-2025-11844 Source advisory: OSV:PYSEC-2026-1930...
sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2025-11844 via smolagents (0.1.3)
smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2025-11844 Source advisory: OSV:PYSEC-2026-1930...
Hugging Face Smolagents XPath injection vulnerability in the search_item_ctrl_f function
Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the searchitemctrlf function located in src/smolagents/visionwebbrowser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitizatio...
PYSEC-2026-1930 Hugging Face Smolagents XPath injection vulnerability in the search_item_ctrl_f function
Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the searchitemctrlf function located in src/smolagents/visionwebbrowser.py. The function constructs an XPath query by directly concatenating user-supplied input into the XPath expression without proper sanitizatio...
PYSEC-2026-543 Hugging Face smolagents: Unsafe deserialization in Remote Python Executor leads to RCE
Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication is not required to exploit this...
sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2025-14931 via smolagents (0.1.3)
smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2025-14931 Source advisory: OSV:PYSEC-2026-543...
agentengine (>=0.1.5, <=0.1.8), deepmost (0.5.2) +13 more potentially affected by CVE-2025-14931 via smolagents (>=1.8.1, <=1.23.0)
smolagents PYPI version =1.8.1, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.1.0, =0.16.0, =1.4.0, =0.0.1.dev0, =0.0.1, =0.3.0, =0.3.7 Source cves: CVE-2025-14931 Source advisory: OSV:PYSEC-2026-543...
Hugging Face smolagents: Unsafe deserialization in Remote Python Executor leads to RCE
Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication is not required to exploit this...
PYSEC-2026-542 smolagents has Sandbox Escape Vulnerability in the local_python_executor.py Module
A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution RCE. The vulnerability stems from the localpythonexecutor.py module, which inadequately restricts Python code...