PT-2026-34741 · Hugging Face · Lerobot

Valentin Lobstein · Published 2026-04-23 · Updated 2026-04-23 · CVE-2026-25874

Mitre

CVSS v4.0

9.3

Critical

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

LeRobot contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-25874

Affected Products

Lerobot

References · 5

• https://github.com/huggingface/lerobot/issues/3134 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-25874 · Security Note
• https://github.com/huggingface/lerobot/pull/3048 · Note
• https://github.com/huggingface/lerobot/issues/3047 · Note
• https://vulncheck.com/advisories/lerobot-unsafe-deserialization-remote-code-execution-via-grpc · Note