CVE-2025-5120
A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution (RCE). The vulnerability stems from the local_python_executor.py module, which inadequately restricts Python code execution despite employing static and dynamic checks. Attackers can exploit whitelisted modules and functions to execute arbitrary code, compromising the host system. This flaw undermines the core security boundary intended to isolate untrusted code, posing risks such as unauthorized code execution, data leakage, and potential integration-level compromise. The issue is resolved in version 1.17.0.
- Affected products
- Smolagents
- Huggingface Smolagents
- = 1.14.0
- Fix
- Available
- CVSS 3.1
- 10.0 CRITICAL
- EPSS
- 19.5% (97th percentile)
- Weakness
- CWE-94
- NVD status
- Analyzed
- Published
- 2025-07-27
No indexed exploits for CVE-2025-5120 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2025-5120 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.