Critical severity10.0NVD Advisory· Published Dec 23, 2025· Updated Apr 15, 2026

CVE-2025-14931

Description

Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the parsing of pickle data. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-28312.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
smolagentsPyPI	<= 1.23.0	—

Affected products

Pachno/Smolagentsinferred
Package: https://pypi.org/project/smolagents

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/advisories/GHSA-q9r5-6hrr-9ph7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-14931ghsaADVISORY
www.zerodayinitiative.com/advisories/ZDI-25-1143ghsaWEB
www.zerodayinitiative.com/advisories/ZDI-25-1143/nvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000