Login Request a demo
SM
Product
smolagents
by huggingface · last CVE Mar 27, 2026
4
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 3High 0Medium 1Low 0
Severity
All severities4Critical3High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add smolagents to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-4963
10.0
1%
Mar 27
huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection
Affected: 1.25.0.dev0
CVE-2025-5120
10.0
31%
Jul 27
Sandbox Escape Vulnerability in huggingface/smolagents
Affected: 1.14.0
CVE-2026-2654
9.8
0%
Feb 18
huggingface smolagents LocalPythonExecutor requests.post server-side request forgery
Affected: 1.24.0
CVE-2025-11844
5.4
0%
Oct 22
XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function
Affected: 1.20.0 before 1.22.0
Showing 4