# CVE-2026-25874: LeRobot Unsafe Deserialization Remote Code Execution via gRPC

> CVE-2026-25874: LeRobot Unsafe Deserialization Remote Code Execution via gRPC. CVSS 9.8 (CVSS 3.1).

Canonical: https://rewindex.com/cve/CVE-2026-25874
Last updated: 2026-07-14T16:16:57Z

- Published: 2026-04-23 19:45 UTC · Updated: 2026-07-14 16:16 UTC · Assigner: VulnCheck
- CVSS: 9.8 (CVSS 3.1) · Severity: Critical · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS: 15.5%, 97th percentile (scored 2026-10-25)
- CISA KEV: no
- CWE: CWE-502

## Description

LeRobot through 0.5.1 contains an unsafe deserialization vulnerability in the async inference pipeline where pickle.loads() is used to deserialize data received over unauthenticated gRPC channels without TLS in the policy server and robot client components. An unauthenticated network-reachable attacker can achieve arbitrary code execution on the server or client by sending a crafted pickle payload through the SendPolicyInstructions, SendObservations, or GetActions gRPC calls.

## Affected vendors and products

- Hugging Face: LeRobot

## Tracked companies

- [Hugging Face](https://rewindex.com/company/hugging-face.md)

## References

- [CVE record on cve.org](https://www.cve.org/CVERecord?id=CVE-2026-25874)
- [NVD entry](https://nvd.nist.gov/vuln/detail/CVE-2026-25874)
- [https://chocapikk.com/posts/2026/lerobot-pickle-rce/](https://chocapikk.com/posts/2026/lerobot-pickle-rce/)
- [https://github.com/huggingface/lerobot/issues/3047](https://github.com/huggingface/lerobot/issues/3047)
- [https://github.com/huggingface/lerobot/issues/3134](https://github.com/huggingface/lerobot/issues/3134)
- [https://github.com/huggingface/lerobot/pull/3048](https://github.com/huggingface/lerobot/pull/3048)
- [https://www.vulncheck.com/advisories/lerobot-unsafe-deserialization-remote-code-execution-via-grpc](https://www.vulncheck.com/advisories/lerobot-unsafe-deserialization-remote-code-execution-via-grpc)

---

_Sources: CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (https://www.cve.org/) This product uses data from the NVD API but is not endorsed or certified by the NVD. (https://nvd.nist.gov/) Known Exploited Vulnerabilities catalog from CISA. (https://www.cisa.gov/known-exploited-vulnerabilities-catalog) EPSS scores from FIRST (Exploit Prediction Scoring System). (https://www.first.org/epss/)_


---
Canonical: https://rewindex.com/cve/CVE-2026-25874 · Markdown: https://rewindex.com/cve/CVE-2026-25874.md · JSON: https://rewindex.com/api/v1/cves/CVE-2026-25874 · Data licensed CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/) · Generated 2026-10-26T03:09:44.818Z