CVE-2026-25874
קריטית 9.8
תיאור (מקור, אנגלית)
LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.
מדדים
- CVSS 3.1
-
9.8 (CRITICAL)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 4.0
-
9.3 (CRITICAL)
מקור הציון: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — סבירות ניצול
- 16% (אחוזון 100) נכון ל-29/7/2026
- CWE
- CWE-502
מוצרים מושפעים
huggingface: lerobot
קישורים
- https://github.com/huggingface/lerobot/pull/3048 Issue TrackingPatch
- https://chocapikk.com/posts/2026/lerobot-pickle-rce/ ExploitMitigationThird Party Advisory
- https://github.com/huggingface/lerobot/issues/3047 ExploitIssue TrackingThird Party Advisory
- https://www.vulncheck.com/advisories/lerobot-unsafe-deserialization-remote-cod… ExploitThird Party Advisory
- https://github.com/huggingface/lerobot/issues/3134 Issue Tracking