LE
Product
LeRobot
by Hugging Face · last CVE Oct 26, 2026
2
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch

Add LeRobot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-25874
9.8
16%
Apr 23
LeRobot Unsafe Deserialization Remote Code Execution via gRPC
Affected: through 0.5.1
CVE-2026-115533
New
–
0%
Oct 26
The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrained() method and related paths
Affected: 0.4.0 through 0.6.1
Showing 2