CVE-2026-25874: Huggingface Lerobot

What is CVE-2026-25874?

LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.

CVSS9.8 NVD 3.1

SeverityCRITICAL

ExploitationNo exploitation reported

EPSS16% · P96

Triage statusNo Known Exploit

ActionPatch within 48 hours

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD published2026-04-23

NVD last modified2026-07-14

Timeline

2026-04-23Published to the U.S. National Vulnerability Database (NVD)
2026-04-29First covered in a defend.network daily briefing
2026-07-14NVD record last updated

Affected product

Huggingface Lerobot

References

Referenced in our briefings & reports

GitHub, Hugging Face RCE; VECT 2.0 ransomware; BlueNoroff deepfakes (2026-04-29)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.

What is CVE-2026-25874?

Timeline

Affected product

References

Referenced in our briefings & reports

Get Critical CVE Alerts