{"data":{"id":"827da033-95b5-41ef-bf22-cb66cea3c26f","title":"CVE-2025-11844: Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function…","summary":"Hugging Face Smolagents version 1.20.0 has an XPath injection flaw in the search_item_ctrl_f function in src/smolagents/vision_web_browser.py. The function concatenates user-supplied input directly into an XPath expression without sanitization or escaping, so an attacker can alter the query logic to bypass search filters and reach unintended DOM elements. This can lead to information disclosure, manipulation of AI agent interactions, and disruption of automated web tasks.","solution":"Fixed in version 1.22.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-11844","publishedAt":"2025-10-22T14:15:49.457Z","cveId":"CVE-2025-11844","cweIds":["CWE-643"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["smolagents@< 1.22.0 (fixed: 1.22.0)"],"affectedPackageNames":["smolagents"],"affectedPackageRefs":["pypi:smolagents"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["Hugging Face Smolagents"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Hugging Face Smolagents XPath injection in search_item_ctrl_f function","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0028,"epssCheckedAt":"2026-11-04T12:08:33.690Z","kevDateAdded":null,"advisoryAliases":["GHSA-8mf9-rmgw-33qc"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:52:15.084Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-09-25T08:42:54.205Z","daysToFix":-27,"fixCheckedAt":"2026-10-29T21:43:24.033Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"smolagents","fixedVersion":"1.22.0","matchedVersion":"1.22.0","fixReleasedAt":"2025-09-25T08:42:54.205Z","daysToFix":-27,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:43:23.882Z"}]}}