CVEs / CVE-2025-5120
CVE-2025-5120: huggingface huggingface/smolagents vulnerability
- critical 10 CVSS 3.1 (NVD)
- EPSS 31.2% chance of exploitation in the next 30 days, higher than 98% of CVEs (1 Nov 2026)
- Last changed at its sources
Are you affected? Check your servers with Stackurity: it lists the software on each server and the vulnerabilities to fix first.
Check your servers with Stackurity Already using Stackurity? Search for CVE-2025-5120
Description
A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution (RCE). The vulnerability stems from the local_python_executor.py module, which inadequately restricts Python code execution despite employing static and dynamic checks. Attackers can exploit whitelisted modules and functions to execute arbitrary code, compromising the host system. This flaw undermines the core security boundary intended to isolate untrusted code, posing risks such as unauthorized code execution, data leakage, and potential integration-level compromise. The issue is resolved in version 1.17.0.
Affected and fixed versions
| Product | Affected | Fixed in |
|---|---|---|
| huggingface huggingface/smolagents | from unspecified, before 1.17.0 | 1.17.0 |
| Product | Affected | Fixed in |
|---|---|---|
| smolagents (PyPI) | before 1.17.0 | 1.17.0 |
Package versions from GHSA-6v92-r5mx-h5fx.
Exploitation
Not in the CISA Known Exploited Vulnerabilities catalog as of 30 Oct 2026.
Severity
| CVSS 3.1 | 10 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HScored by NVD |
|---|---|
| Weakness | CWE-94 |
References
- CVE-2025-5120 on NVD
- CVE-2025-5120 on OSV
- https://github.com/huggingface/smolagents/commit/33a942e62b6fbf6a35d41f1c735bda2d64c163d0 Patch
- https://huntr.com/bounties/63ab1cfe-b573-4cf5-a7d3-fb6c957e34b0 Exploit, Third Party Advisory
Sources
Exploitation status from the CISA Known Exploited Vulnerabilities catalog. EPSS scores from FIRST. Descriptions, severity and references from the National Vulnerability Database. Open-source package versions from OSV (CC-BY 4.0). Text is shown as each source states it; Stackurity does not edit it. Check the vendor's advisory before acting.
This product uses data from the NVD API but is not endorsed or certified by the NVD.