← Back to Vulnerability Reports CVE Intelligence

CVE-2026-25874

Huggingface Lerobot•CRITICAL · CVSS 9.8•No exploitation reported

What is CVE-2026-25874?

LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.

CVSS9.8 NVD 3.1

SeverityCRITICAL

ExploitationNo exploitation reported

EPSS1% · P61

Triage statusNo Known Exploit

ActionPatch within 48 hours

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWECWE-502

NVD published2026-04-23

NVD last modified2026-07-14

Timeline

2026-04-23Published to the U.S. National Vulnerability Database (NVD)
2026-04-29First covered in a defend.network daily briefing
2026-07-14NVD record last updated

Affected product

Huggingface Lerobot

References

Referenced in our briefings & reports

GitHub, Hugging Face RCE; VECT 2.0 ransomware; BlueNoroff deepfakes (2026-04-29)

Related vulnerabilities

CVE-2026-63077 – JetBrains TeamCity (same weakness: CWE-502)
CVE-2026-50522 – Microsoft SharePoint (same weakness: CWE-502)
CVE-2026-58644 – Microsoft SharePoint (same weakness: CWE-502)
CVE-2026-44963 (same weakness: CWE-502)
CVE-2026-45247 – Mirasvit Full Page Cache Warmer (same weakness: CWE-502)
CVE-2026-45659 – Microsoft SharePoint Server (same weakness: CWE-502)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.