CVE-2025-5120: Sandbox Escape Vulnerability in huggingface/smolagents
A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution (RCE). The vulnerability stems from the localpythonexecutor.py module, which inadequately restricts Python code execution despite employing static and dynamic checks. Attackers can exploit whitelisted modules and functions to execute arbitrary code, compromising the host system. This flaw undermines the core security boundary intended to isolate untrusted code, posing risks such as unauthorized code execution, data leakage, and potential integration-level compromise. The issue is resolved in version 1.17.0.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5120?
CVE-2025-5120 has a high severity level due to its potential to allow remote code execution.
How do I fix CVE-2025-5120?
To fix CVE-2025-5120, upgrade to the latest version of Hugging Face smolagents where the vulnerability has been patched.
What kind of attack is possible with CVE-2025-5120?
CVE-2025-5120 allows attackers to perform a sandbox escape, leading to remote code execution (RCE) within the application.
Which version of smolagents is affected by CVE-2025-5120?
CVE-2025-5120 specifically affects Hugging Face smolagents version 1.14.0.
Where does the vulnerability CVE-2025-5120 originate from?
The vulnerability CVE-2025-5120 originates from the local_python_executor.py module in the Hugging Face smolagents.