CVE-2026-115533 | Hugging Face LeRobot up to 0.6.1 Class Instantiation from_pretrained deserialization

SecurityVulns
Yanac

A vulnerability described as critical has been identified in Hugging Face LeRobot up to 0.6.1. This issue affects the function from_pretrained of the component Class Instantiation. The manipulation results in deserialization.

This vulnerability is identified as CVE-2026-115533. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More