# CVE-2025-5120: Sandbox Escape Vulnerability in huggingface/smolagents

> CVE-2025-5120: Sandbox Escape Vulnerability in huggingface/smolagents. CVSS 7.6 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2025-5120
Last updated: 2026-06-17T09:47:14Z

- Published: 2025-07-27 07:57 UTC · Updated: 2026-06-17 09:47 UTC · Assigner: @huntr\_ai
- CVSS: 7.6 (CVSS 3.1) · Severity: High · Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
- EPSS: 26.3%, 98th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-94

## Description

A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution (RCE). The vulnerability stems from the local\_python\_executor.py module, which inadequately restricts Python code execution despite employing static and dynamic checks. Attackers can exploit whitelisted modules and functions to execute arbitrary code, compromising the host system. This flaw undermines the core security boundary intended to isolate untrusted code, posing risks such as unauthorized code execution, data leakage, and potential integration-level compromise. The issue is resolved in version 1.17.0.

## Affected vendors and products

- huggingface: huggingface/smolagents

## Tracked companies

- [Hugging Face](https://rewindex.com/company/hugging-face.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2025-5120)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2025-5120)
- [https://github.com/huggingface/smolagents/commit/33a942e62b6fbf6a35d41f1c735bda2d64c163d0](https://github.com/huggingface/smolagents/commit/33a942e62b6fbf6a35d41f1c735bda2d64c163d0)
- [https://huntr.com/bounties/63ab1cfe-b573-4cf5-a7d3-fb6c957e34b0](https://huntr.com/bounties/63ab1cfe-b573-4cf5-a7d3-fb6c957e34b0)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2025-5120 · Markdown: https://rewindex.com/cve/CVE-2025-5120.md · JSON: https://rewindex.com/api/v1/cves/CVE-2025-5120 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T02:15:33.101Z