Unsafe Deserialization Issue in LeRobot by Hugging Face
CVE-2026-25874

9.3CRITICAL

Key Information:

Vendor: Hugging Face
Status: Lerobot
Vendor: CVE Published:; 23 April 2026

🔔 Create Hugging Face Vulnerability Alert

Badges

📈 Score: 140👾 Exploit Exists🟡 Public PoC🟣 EPSS 15%📰 News Worthy

What is CVE-2026-25874?

CVE-2026-25874 is a critical security vulnerability discovered in LeRobot, a software product developed by Hugging Face that facilitates machine learning and AI interactions through an inference pipeline. The vulnerability arises from an unsafe deserialization process within the async inference communication protocols, specifically involving the use of pickle.loads() for processing data over gRPC channels that lack authentication and encryption (TLS). This flaw allows unauthenticated attackers to remotely execute arbitrary code on both the policy server and robot client components of the application by sending specially crafted payloads. As a result, organizations utilizing LeRobot face serious risks, as this vulnerability can lead to unauthorized access, manipulation of the application’s behavior, and potentially more severe implications like data breaches or system takeovers.

Potential impact of CVE-2026-25874

Arbitrary Code Execution: The most immediate concern is the ability for attackers to execute arbitrary code on affected systems, which can lead to a complete compromise of the server or client environments. This capability can be exploited to install malware, backdoors, or conduct further attacks on the network.
Data Integrity and Confidentiality Breach: Exploitation of this vulnerability can result in unauthorized access to sensitive data, affecting the integrity and confidentiality of the information processed through LeRobot. This breach may expose confidential business information or personal data to external threats.
Operational Disruption: The exploitation of CVE-2026-25874 can severely disrupt the operations of organizations using LeRobot, as attackers may manipulate its operation to mislead users or disrupt services. This disruption can lead to significant downtime, financial loss, and damage to the organization’s reputation.

Affected Version(s)

LeRobot 0 <= 0.5.1

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-25874 - Proof of Concept