QwikSec

Security Database

CVE

CWE

Training

CVE-2026-25874

Published: Apr 23, 2026

Modified: Apr 24, 2026

PUBLISHED

Description

LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.

Vendor	Product	Versions
Hugging Face	LeRobot	affected `0 - <= 0.5.1`

Weaknesses (CWE)

References

https://chocapikk.com/posts/2026/lerobot-pickle-rce/

technical-description

exploit

https://github.com/huggingface/lerobot/issues/3047

issue-tracking

https://github.com/huggingface/lerobot/pull/3048

mitigation

https://github.com/huggingface/lerobot/issues/3134

vendor-advisory

https://www.vulncheck.com/advisories/lerobot-unsafe-deserialization-remote-code-execution-via-grpc

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.