CVE-2025-5120

描述

A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution (RCE). The vulnerability stems from the local_python_executor.py module, which inadequately restricts Python code execution despite employing static and dynamic checks. Attackers can exploit whitelisted modules and functions to execute arbitrary code, compromising the host system. This flaw undermines the core security boundary intended to isolate untrusted code, posing risks such as unauthorized code execution, data leakage, and potential integration-level compromise. The issue is resolved in version 1.17.0.

如何修補 CVE-2025-5120

要修補 CVE-2025-5120,請將受影響套件升級到下列已修補版本。

• —升級至 1.17.0 或更新版本

CVE-2025-5120 正在被利用嗎?

中等 — EPSS 為 18.7%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 1.17.0

CVSS 分數

參考連結(6)

• ADVISORYgithub.com/advisories/GHSA-6v92-r5mx-h5fx
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2025-5120
• PATCHgithub.com/huggingface/smolagents
• PATCHpypi.org/project/smolagents
• WEB