PT-2025-43137 · Hugging Face · Smolagents

Published 2025-09-25 · Updated 2025-10-30 · CVE-2025-11844

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Hugging Face Smolagents versions prior to 1.22.0

Description The software contains an XPath injection issue in the search item ctrl f function within the src/smolagents/vision web browser.py file. The function builds an XPath query by combining user-provided input directly into the XPath expression without sufficient sanitization or escaping. This allows an attacker to inject malicious XPath syntax, potentially altering the query's logic. This can lead to bypassing search filters, accessing unintended DOM elements, and disrupting web automation workflows, potentially resulting in information disclosure and compromised AI agent interactions. The API endpoint is not mentioned. The vulnerable parameter is not mentioned.

Recommendations Upgrade to Smolagents version 1.22.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-643

Related Identifiers

BDU:2025-14894

CVE-2025-11844

GHSA-8MF9-RMGW-33QC

Affected Products

Smolagents

References · 8

• 🔥 https://huntr.com/bounties/01ab4405-9bca-4b26-b7a3-5ca1863a69b4 · Exploit
• https://github.com/huggingface/smolagents/commit/f570ed5e17999d4cf7d5e79c2830fbaefab8a794 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-11844 · Security Note
• https://bdu.fstec.ru/vul/2025-14894 · Security Note
• https://osv.dev/vulnerability/CVE-2025-11844 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-8mf9-rmgw-33qc · Vendor Advisory
• https://github.com/huggingface/smolagents · Note
• https://t.me/cveNotify/141011 · Telegram Post