Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

smolagents

6 known vulnerabilities (1 critical, 2 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
1.26.0 (May 29, 2026): no advisory affects it
Newest unaffected release
1.26.0 (May 29, 2026), the latest release
Advisories
6 · 1 critical, 2 high, 3 medium
Weekly downloads
152.7K
Dependents
111
Releases
41 since 0.1.0 (Dec 27, 2024)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 6

  • CVE-2026-4963Medium 5.3

    huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection

    Affected: through 1.25.0.dev0.

    Fixed in 1.25.0 (released May 14, 2026, 48 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 1.26.0, is not affected.

  • CVE-2026-2654Medium 5.3

    huggingface smolagents LocalPythonExecutor requests.post server-side request forgery

    Affected: through 1.24.0.

    Fixed in 1.25.0 (released May 14, 2026, 85 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 1.26.0, is not affected.

  • CVE-2025-14931Critical 10.0

    Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability

    Affected: through 1.23.0.

    Fixed in 1.24.0 (released Jan 16, 2026, 24 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 1.26.0, is not affected.

  • CVE-2025-11844Medium 5.4

    XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function

    Affected: fixed in 1.22.0.

    Fixed in 1.22.0 (released Sep 25, 2025, 27 days before disclosure).

    The latest release, 1.26.0, is not affected.

  • Sandbox escape in smolagents Local Python execution environment via dunder attributes

    Affected: fixed in 1.21.0.

    Fixed in 1.21.0 (released Aug 7, 2025, 27 days before disclosure).

    The latest release, 1.26.0, is not affected.

  • Sandbox Escape Vulnerability in huggingface/smolagents

    Affected: fixed in 1.17.0.

    Fixed in 1.17.0 (released May 27, 2025, 61 days before disclosure).

    The latest release, 1.26.0, is not affected.