CVE-2026-25874

Katalog CVE

CVSS 9.8 · Critical EPSS 0,95%

Kerentanan Deserialization of Untrusted Data pada huggingface lerobot. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.

Rincian

Terbit di NVD

23 April 2026

Terakhir diubah

14 Juli 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

0,95% peluang dieksploitasi; lebih tinggi dari 60,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/huggingface/lerobot/pull/3048 issue tracking · patch
• https://chocapikk.com/posts/2026/lerobot-pickle-rce/ exploit · mitigasi · advisory pihak ketiga
• https://github.com/huggingface/lerobot/issues/3047 exploit · issue tracking · advisory pihak ketiga
• https://www.vulncheck.com/advisories/lerobot-unsafe-deserialization-remote-code-execution-via-grpc exploit · advisory pihak ketiga
• https://github.com/huggingface/lerobot/issues/3134 issue tracking