Known vulnerabilities in Hugging Face LeRobot
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-115533 | The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the… | Not rated | Oct 26, 2026 |
| CVE-2026-25874 | LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where… | 9.3 Critical | Apr 23, 2026 |