CVE-2025-5120

Katalog CVE

CVSS 10.0 · Critical EPSS 24,6%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada huggingface smolagents. Skor CVSS 3.1 10.0 (Critical) menurut NVD.

Deskripsi (NVD)

A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution (RCE). The vulnerability stems from the local_python_executor.py module, which inadequately restricts Python code execution despite employing static and dynamic checks. Attackers can exploit whitelisted modules and functions to execute arbitrary code, compromising the host system. This flaw undermines the core security boundary intended to isolate untrusted code, posing risks such as unauthorized code execution, data leakage, and potential integration-level compromise. The issue is resolved in version 1.17.0.

Rincian

Terbit di NVD

27 Juli 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

10.0 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

24,6% peluang dieksploitasi; lebih tinggi dari 97,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/huggingface/smolagents/commit/33a942e62b6fbf6a35d41f1c735bda2d64c163d0 patch
• https://huntr.com/bounties/63ab1cfe-b573-4cf5-a7d3-fb6c957e34b0 exploit · advisory pihak ketiga