What’s Vulnerable › Products

huggingface smolagents vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your huggingface smolagents version is affected

Latest huggingface smolagents vulnerabilities

• CVE-2026-4963 — huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection (CVSS 10.0)
• CVE-2026-2654 — huggingface smolagents LocalPythonExecutor requests.post server-side request forgery (CVSS 9.8)
• CVE-2025-14931 — Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability (CVSS 10.0)
• CVE-2025-11844 — XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function (CVSS 5.4)
• CVE-2025-5120 — Sandbox Escape Vulnerability in huggingface/smolagents (CVSS 10.0)