smolagents vulnerabilities (PyPI)

5 vulnerabilities.

• smolagents PyPI huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection CVE-2026-4963 5.3 MediumMarch 27, 2026
• smolagents PyPI huggingface smolagents LocalPythonExecutor requests.post server-side request forgery CVE-2026-2654 5.3 MediumFebruary 18, 2026
• smolagents PyPI Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2025-14931 10.0 CriticalDecember 23, 2025
• smolagents PyPI XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function CVE-2025-11844 Public exploitFix available 5.4 MediumOctober 22, 2025
• smolagents PyPI Sandbox Escape Vulnerability in huggingface/smolagents CVE-2025-5120 Fix available EPSS 31.2% 7.6 HighJuly 27, 2025