Paper/Archive/CVE-2026-4963

CVE-2026-4963

huggingface smolagents — huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection

EPSS 0.6%public exploit CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (NVD)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 47.9.479 × 209.6 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluate_augassign/evaluate_call/evaluate_with of the file src/smolagents/local_python_executor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Affected

ProductAffectedFixed inSource

smolagents1.25.0.dev0–CNA

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

VulDB (CNA)6.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

VulDB (CNA)6.3CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

VulDB (CNA)5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

writeupvuldb.com/?id.353840 refvuldb.com/?ctiid.353840 writeupvuldb.com/?submit.777623 writeupvuldb.com/?submit.777643 writeupvuldb.com/?submit.777644 refgist.github.com/YLChen-007/7146f45960f79bc1e2976fed526e0a9b exploitgist.github.com/YLChen-007/35b7d46e892266a0ed6dbe57802858be