Is CVE-2026-25874 actively exploited?

No active exploitation of CVE-2026-25874 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-25874 be exploited remotely?

Yes. CVE-2026-25874 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-25874?

CVE-2026-25874 has a CVSS score of 9.8 (CRITICAL).

HOME VULNERABILITIESCVE-2026-25874

CRITICAL

CVE-2026-25874

CWE-502Published: April 23, 2026· Updated: Apr 28, 2026

9.8

CVSS v3.1

EPSS:0.06%probability of exploitation in 30 daysPercentile:19.3th

Official Description

LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.

NVD Source

Technical Analysis

CVE-2026-25874 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.

From a weakness classification perspective (CWE-502): Insecure deserialization vulnerabilities allow attackers to inject malicious objects during deserialization, potentially enabling remote code execution.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorNetwork

Attack ComplexityLow

Privileges Req.None

User InteractionNone

ScopeUnchanged

Impact

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Vendors & Products

huggingface1 product

lerobot

Source: NVD CPE · 1 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time

Exploit-DB

Offensive Security exploit database

GitHub PoC Search

Community PoC repositories

Rapid7 / Metasploit

Metasploit module search

PacketStorm

Security advisories & exploits

External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

PATCHhttps://github.com/huggingface/lerobot/pull/3048

ADVISORYhttps://chocapikk.com/posts/2026/lerobot-pickle-rce/

ADVISORYhttps://github.com/huggingface/lerobot/issues/3047

ADVISORYhttps://www.vulncheck.com/advisories/lerobot-unsafe-deserialization-remote-code-execution-via-grpc

News & Research Mentioning CVE-2026-25874

Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE

The Hacker News· Apr 28, 2026

Cybersecurity researchers have disclosed details of a critical security flaw impacting LeRobot, Hugging Face's open-source robotics platform with nearly 24,000 GitHub stars, that could be exploited to achieve remote code execution. The vulnerability in question is CVE-2026-25874 (CVSS score: 9.3), which has been described as a case of untrusted data deserialization stemming from the use of the [xlite_meta score:50 src:The Hacker News xlite_fp:46d3d9895ad49b6d0be92221a138677fbbff3c7ebbb387bfa501cfc986ee6c66]