PT-2026-20398 · Hugging Face+1 · Smolagents+1

Choco094Late · CVE-2026-2654 · Published 2026-02-18 · Updated 2026-07-13

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions huggingface smolagents version 1.24.0

Description A weakness exists in the LocalPythonExecutor component of the software. The functions requests.get and requests.post are affected, potentially leading to server-side request forgery. This issue can be exploited remotely. The exploit is publicly available. The vendor was notified but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-2654

GHSA-JXGV-6J54-WWC7

PYSEC-2026-3067

Affected Products

Requests

Smolagents

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/2xxx/CVE-2026-2654.json · Exploit
• 🔥 https://github.com/CH0ico/CVE_choco_smolagent/tree/main · Exploit
• 🔥 https://github.com/CH0ico/CVE_choco_smolagent/blob/main/report.md#proof-of-concept-execution · Exploit
• https://osv.dev/vulnerability/CVE-2026-2654 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-3067 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-jxgv-6j54-wwc7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-2654 · Security Note
• https://github.com/huggingface/smolagents · Note
• https://vuldb.com/?ctiid.346451 · Note
• https://github.com/advisories/GHSA-jxgv-6j54-wwc7 · Note
• https://vuldb.com/?id.346451 · Note
• https://twitter.com/CVEnew/status/2024123160568758468 · Twitter Post
• https://twitter.com/CyberAmyntas/status/2031683225593299111 · Twitter Post
• https://pypi.org/project/smolagents · Note
• https://vuldb.com/?submit.752774 · Note