Huggingface Smolagents
4 CVEs affecting Huggingface Smolagents. Latest disclosed: 2026-03-27. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-5120 | Critical | 10.0 | 2025-07-27 | A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and a… |
CVE-2026-4963 | Medium | 6.3 | 2026-03-27 | A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluate_augassign/evaluate_call/evaluate_with of the file src/… |
CVE-2026-2654 | Medium | 6.3 | 2026-02-18 | A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Exec… |
CVE-2025-11844 | Medium | 5.4 | 2025-10-22 | Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browse… |