CVE-2026-25874 - Vulnerability Details

Related Threat Clusters

• Critical RCE Vulnerability in Hugging Face LeRobot Exposes Systems to Attack

  A critical remote code execution (RCE) vulnerability, tracked as CVE-2026-25874, has been identified in Hugging Face's LeRobot, an open-source robotics machine learning framework. This flaw, which has a CVSS severity…

  3 articles · Updated April 28, 2026

Recent Intelligence Reports

• Hugging Face LeRobot Vulnerability Enables Unauthenticated RCE Attacks — Cybersecuritynews · April 29, 2026
• Hugging Face LeRobot Flaw Opens Door to Remote Code Execution Attacks — Gbhackers · April 28, 2026

Related Entities