Huggingface Smolagents
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Huggingface Smolagents.
By the Year
In 2026 there have been 2 vulnerabilities in Huggingface Smolagents with an average score of 6.3 out of ten. Last year, in 2025 Smolagents had 1 security vulnerability published. That is, 1 more vulnerability have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 3.70
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 6.30 |
| 2025 | 1 | 10.00 |
It may take a day or so for new Smolagents vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Huggingface Smolagents Security Vulnerabilities
Remote Code Injection in HuggFace SmolAgents 1.25.0.dev0 exec
CVE-2026-4963
6.3 - Medium
- March 27, 2026
A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluate_augassign/evaluate_call/evaluate_with of the file src/smolagents/local_python_executor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Code Injection
SSRF in smolagents 1.24.0 LocalPythonExecutor
CVE-2026-2654
6.3 - Medium
- February 18, 2026
A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
SSRF
SmolAgents 1.14.0 Sandbox Escape RCE
CVE-2025-5120
10 - Critical
- July 27, 2025
A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution (RCE). The vulnerability stems from the local_python_executor.py module, which inadequately restricts Python code execution despite employing static and dynamic checks. Attackers can exploit whitelisted modules and functions to execute arbitrary code, compromising the host system. This flaw undermines the core security boundary intended to isolate untrusted code, posing risks such as unauthorized code execution, data leakage, and potential integration-level compromise. The issue is resolved in version 1.17.0.
Code Injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Huggingface Smolagents or by Huggingface? Click the Watch button to subscribe.
