repository icon
huggingface / smolagents Project repository

🤗 smolagents: a barebones library for agents that think in python code.

Submit a report

FIRST INTERACTION

WITHIN37 DAYS

REVIEW

WITHIN37 DAYS

FIX

WITHINN/A DAYS

Remote Code Execution via PythonInterpreterTool in HuggingFace SmolAgents
scodesain
not applicable
LLM06: Insecure Code Execution
hackwithaj
spam
Hugging Face API Key Exposure with Elevated Permissions
vadivelr18
not applicable
Improper Input Validation Allows Arbitrary Code Execution via --imports in smola...
surajtekale
not applicable
Prompt Injection Enables Reflexive RCE via PythonInterpreterTool
darkeeeandme
not applicable
Remote Code Execution via Insecure Authorized Imports in CodeAgent
h-h-e
spam
Arbitrary Code Execution and Sensitive Data Exfiltration via load_tool Trust Rem...
dickytrianza
spam
ReDos in _parse_google_format_docstring
lonelyuan
informative
Medium
Remote code execution caused by prompt injection
tuantv89
self closed
Remote Code Execution in SmolAgents v1.14.0 via Unsafe pickle.loads() on Untrust...
michaelpierre
informative
Critical
Uncaught exception in sandbox can lead to DOS
tasosy2k
informative
High
Unrestricted Jinja2 Template Rendering in populate_template Allows Remote Code E...
taiphung217
informative
Critical
Sandbox Escapes found in LocalPythonExecutor affecting version 1.13.0
jackfromeast
informative
Critical
System Prompt Leakage
rook1337
not applicable