CVE-2025-5120 | huggingface smolagents up to 1.14.0 local_python_executor.py sandbox

July 27, 2025 Yanac

A vulnerability classified as critical was found in huggingface smolagents up to 1.14.0. This vulnerability affects unknown code of the file local_python_executor.py. The manipulation leads to sandbox issue.

This vulnerability was named CVE-2025-5120. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More