CNNVD-202512-4096 Information
Dec 23, 2025
cve
CNNVD ID
CNNVD-202512-4096
Related CVE
- CNNVD Published: 2025-12-23
Description (Chinese)
Hugging Face smolagents是Hugging Face开源的一个用于快速构建智能体的Python库。 Hugging Face smolagents存在代码问题漏洞，该漏洞源于解析pickle数据时缺乏对用户提供数据的验证，可能导致反序列化不可信数据和远程代码执行。
Description (English)
Hugging Face Smolagents is a Python library for the quick construction of an intelligent body, an open source of Hugging Face. There is a code problem loophole in Hugging Face Smolagents, which arises from the lack of validation of data provided by users when the pickle data are deciphered, which may lead to anti-sequencing unreliable data and remote code execution.
Hazard Level
Low
Vulnerability Type
代码问题
Affected Vendor
Hugging Face
Published
2025-12-23
Last Modified
2026-02-24
References
https://www.zerodayinitiative.com/advisories/ZDI-25-1143/
Share on: