Description
A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluate_augassign/evaluate_call/evaluate_with of the file src/smolagents/local_python_executor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
huggingface: smolagents
References7
- gist.github.com/YLChen-007/35b7d46e892266a0ed6dbe57802858be ExploitThird Party Advisory
- gist.github.com/YLChen-007/7146f45960f79bc1e2976fed526e0a9b ExploitThird Party Advisory
- vuldb.com/?submit.777623 ExploitThird Party AdvisoryVDB Entry
- vuldb.com/?submit.777643 ExploitThird Party AdvisoryVDB Entry
- vuldb.com/?submit.777644 ExploitThird Party AdvisoryVDB Entry
- vuldb.com/?ctiid.353840 Permissions RequiredVDB Entry
- vuldb.com/?id.353840 Third Party AdvisoryVDB Entry
Metrics
- CVSS 3.1
-
10.0
CRITICAL
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H - CVSS 4.0
-
2.1
LOW
Score source: CNA
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 1% percentile: 48 · as of 12 November 2026
- CWE
- CWE-74CWE-94
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.