repository icon
huggingface / smolagents Project repository

🤗 smolagents: a barebones library for agents that think in python code.

Submit a report

FIRST INTERACTION

WITHIN43 DAYS

REVIEW

WITHIN45 DAYS

FIX

WITHIN97 DAYS

LocalPythonExecutor sandbox escape leading to Remote Code Execute(RCE)
zoiltin
duplicate
High
Remote Code Execution Vulnerability in Smolagents MCPClient
bayuncao-bit
duplicate
High
Executing LLM generated code from searching Internet content can escape LocalPyt...
quitbug
duplicate
Critical
Remote Code Execution via PythonInterpreterTool in HuggingFace SmolAgents
scodesain
not applicable
Unsafe Pickle Deserialization in smolagents Leads to RCE
jplopezy
informative
Critical
LLM06: Insecure Code Execution
hackwithaj
spam
Server Side Template Injection
omjeki
informative
High
Hugging Face API Key Exposure with Elevated Permissions
vadivelr18
not applicable
Improper Input Validation Allows Arbitrary Code Execution via --imports in smola...
surajtekale
not applicable
Prompt Replay via Gradio UI Enables Agent Control Injection
darkeeeandme
informative
Critical
Unvalidated External Tool Injection via MCPClient Enables Symbolic RCE
darkeeeandme
informative
Critical
Prompt Injection Enables Reflexive RCE via PythonInterpreterTool
darkeeeandme
not applicable
Symbolic Reflex Execution via Dynamic AST Imports in local_python_executor.py
darkeeeandme
informative
High
Remote Code Execution via Insecure Authorized Imports in CodeAgent
h-h-e
spam
Arbitrary Code Execution and Sensitive Data Exfiltration via load_tool Trust Rem...
dickytrianza
spam
ReDos in _parse_google_format_docstring
lonelyuan
informative
Medium
Remote code execution caused by prompt injection
tuantv89
self closed
Remote Code Execution in SmolAgents v1.14.0 via Unsafe pickle.loads() on Untrust...
michaelpierre
informative
Critical
Uncaught exception in sandbox can lead to DOS
tasosy2k
informative
High
Unrestricted Jinja2 Template Rendering in populate_template Allows Remote Code E...
taiphung217
informative
Critical
Python sandbox escape leading to Remote Code Execution (RCE)
superboy-zjc
High
•$250•CVE-2025-5120
Sandbox Escapes found in LocalPythonExecutor affecting version 1.13.0
jackfromeast
informative
Critical
System Prompt Leakage
rook1337
not applicable