Hugging Face LeRobot RCE: Unauthenticated Deserialization Flaw

The Hacker News reports a critical, unpatched vulnerability, CVE-2026-25874 (CVSS 9.3), affecting Hugging Face’s LeRobot platform. This flaw is an untrusted data deserialization issue, allowing unauthenticated remote code execution. Given LeRobot’s nearly 24,000 GitHub stars, its adoption likely extends across numerous robotics and AI development environments.

This isn’t just a theoretical bug; it’s a direct path to total system compromise. An attacker exploiting this vulnerability could execute arbitrary code on systems running LeRobot, gaining full control. The ‘unauthenticated’ aspect is key here – no credentials or prior access are needed, making it trivially exploitable for anyone with network access to a vulnerable instance.

For defenders, this means any LeRobot deployment exposed to untrusted networks is a ticking time bomb. The risk extends beyond the immediate LeRobot instance, as compromise could lead to lateral movement within a network, impacting sensitive AI models, datasets, or even physical robotic systems. Patching is non-existent, so mitigation requires immediate architectural review.