VendorsHugging Facesmolagentsall versions
Vulnerabilities

Hugging Face smolagents

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2025-5120
Sandbox Escape Vulnerability in huggingface/smolagents
Published 2025-07-27 · Analyzed
10.0EPSS 0.228
CVE-2026-4963
huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection
Published 2026-03-27 · Analyzed
10.0EPSS 0.007
CVE-2026-2654
huggingface smolagents LocalPythonExecutor requests.post server-side request forgery
Published 2026-02-18 · Analyzed
9.8EPSS 0.006
CVE-2025-11844
XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function
Published 2025-10-22 · Analyzed
5.4EPSS 0.003