Read the docs
TI-2026-02266 Aliases CVE-2026-2654GHSA-jxgv-6j54-wwc7

huggingface smolagents LocalPythonExecutor requests.post server-side request forgery

Priority MEDIUM 57CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

A weakness has been identified in huggingface smolagents 1.24.0. Impacted is the function requests.get/requests.post of the component LocalPythonExecutor. Executing a manipulation can lead to server-side request forgery. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00431 37th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
huggingfacesmolagents1.24.0—No fix listedCNA
—smolagents (PyPI)up to 1.24.0—No fix listedGHSA-jxgv-6j54-wwc7
  • smolagents Vendorhuggingface Affected 1.24.0 Fixed in — No fix listed CNA
  • smolagents (PyPI) Vendor— Affected up to 1.24.0 Fixed in — No fix listed GHSA-jxgv-6j54-wwc7

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:huggingface:smolagents:*:*:*:*:*:*:*:*1.0.0 – 1.24.0Vulnerablehuggingface
  • cpe:2.3:a:huggingface:smolagents:*:*:*:*:*:*:*:* Versions 1.0.0 – 1.24.0 Vulnerable ·huggingface

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-2654
  2. 2026-10-03 Alias added: GHSA-jxgv-6j54-wwc7

References

Exploit 1

Advisory 2

Other 1

  • TI-2025-04589 Sandbox Escape Vulnerability in huggingface/smolagents CVSS 3.1CRITICAL 10.0
  • TI-2025-10859 XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function CVSS 3.0MEDIUM 5.4
  • TI-2026-04324 huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection CVSS 4.0MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences