{"data":{"id":"663b1a07-6fc4-4abd-9c19-8446d3b8ff18","title":"CVE-2025-5120: A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass…","summary":"A sandbox escape in huggingface/smolagents version 1.14.0 lets attackers bypass the restricted execution environment and achieve remote code execution (RCE). The flaw stems from local_python_executor.py, which inadequately restricts Python code execution despite static and dynamic checks. Attackers can exploit whitelisted modules and functions to run arbitrary code and compromise the host system.","solution":"The issue is resolved in version 1.17.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-5120","publishedAt":"2025-07-27T12:15:25.403Z","cveId":"CVE-2025-5120","cweIds":["CWE-94"],"cvssScore":"10","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["smolagents@< 1.17.0 (fixed: 1.17.0)"],"affectedPackageNames":["smolagents"],"affectedPackageRefs":["pypi:smolagents"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["smolagents"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"huggingface/smolagents sandbox escape allowing remote code execution","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.31237,"epssCheckedAt":"2026-11-04T06:10:15.713Z","kevDateAdded":null,"advisoryAliases":["GHSA-6v92-r5mx-h5fx"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:53:16.600Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-05-27T11:24:15.025Z","daysToFix":-61,"fixCheckedAt":"2026-10-29T21:44:06.256Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"smolagents","fixedVersion":"1.17.0","matchedVersion":"1.17.0","fixReleasedAt":"2025-05-27T11:24:15.025Z","daysToFix":-61,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:44:06.103Z"}]}}