CVE-2026-25874

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 28, 2026

Last Seen

April 29, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in Hugging Face LeRobot Exposes Systems to Attack76.5

A critical remote code execution (RCE) vulnerability, tracked as CVE-2026-25874, has been identified in Hugging Face's LeRobot, an open-source robotics machine learning framework. This flaw, which has a CVSS severity score of 9.8, allows unauthenticated attackers to execute arbitrary commands on aff...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical RCE Vulnerability in Hugging Face LeRobot Exposes Systems to Attack

Apr 28·3 sources

Related Entities

Zero-day Exploit T1059 - Command and Scripting Interpreter LeRobot Hugging Face

CVE-2026-25874

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical RCE Vulnerability in Hugging Face LeRobot Exposes Systems to Attack

Related Articles (2)

Hugging Face LeRobot Vulnerability Enables Unauthenticated RCE Attacks

Hugging Face LeRobot Flaw Opens Door to Remote Code Execution Attacks

Related Entities