Hugging Face LeRobot up to 0.6.1 Class Instantiation from_pretrained deserialization

Summaryinfo

A vulnerability classified as critical has been found in Hugging Face LeRobot up to 0.6.1. Impacted is the function from_pretrained of the component Class Instantiation. This manipulation causes deserialization. This vulnerability is tracked as CVE-2026-115533. The attack is possible to be carried out remotely. No exploit exists.

Detailsinfo

A vulnerability was found in Hugging Face LeRobot up to 0.6.1. It has been declared as critical. Affected by this vulnerability is the function from_pretrained of the component Class Instantiation. The manipulation with an unknown input leads to a deserialization vulnerability. The CWE definition for the vulnerability is CWE-502. The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrained() method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically resolve and instantiate Python classes using importlib.import_module() and getattr().

It is possible to read the advisory at gist.github.com. This vulnerability is known as CVE-2026-115533 since 10/22/2026. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit. The pricing for an exploit might be around USD $0-$5k at the moment (estimation calculated on 10/26/2026).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Hugging Face

Name

• LeRobot

Version

• 0.6.0
• 0.6.1

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion