Hugging Face Lerobot vulnerabilities
2 vulnerabilities
Known vulnerabilities in Hugging Face Lerobot, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
Insufficient evidenceCVE-2026-115533hugging face · lerobotCVE-2026-115533The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrained() method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically resolve and instantiate Python classes using importlib.import_module() and getattr().CVSSUnscoredEPSS0.34%PrioritiseCVE-2026-25874hugging face · lerobot +1 moreLeRobot Unsafe Deserialization Remote Code Execution via gRPCLeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.CVSS9.8CriticalEPSS15.55%