VendorsHugging Facesmolagentsany version
Vulnerabilities

Hugging Face smolagents any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2026-2654
huggingface smolagents LocalPythonExecutor requests.post server-side request forgery
Published 2026-02-18 · Analyzed
9.8EPSS 0.006
CVE-2025-11844
XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function
Published 2025-10-22 · Analyzed
5.4EPSS 0.003