XPath Injection Vulnerability in Hugging Face Smolagents Web Automation Tool
CVE-2025-11844

5.4MEDIUM

Key Information:

Vendor

Huggingface

Status
Huggingface/smolagents
Vendor
CVE Published:
22 October 2025

What is CVE-2025-11844?

The Hugging Face Smolagents version 1.20.0 is susceptible to an XPath injection vulnerability within the search_item_ctrl_f function found in src/smolagents/vision_web_browser.py. This vulnerability arises from the direct incorporation of user-input into an XPath query without sufficient sanitization and escaping. Attackers can exploit this weakness to inject malicious XPath syntax, potentially altering the logic of queries, bypassing search filters, and accessing unintended DOM elements. As a result, this can lead to information leakage, manipulation of AI agent interactions, and instabilities in web automation processes. The vulnerability has been patched in version 1.22.0.

Affected Version(s)

huggingface/smolagents < 1.22.0

References

https://huntr.com/bounties/01ab4405-9bca-4b26-b7a3-5ca186...
https://github.com/huggingface/smolagents/commit/f570ed5e...

CVSS V3.0

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.