All posts tagged "CVE-2026-25874 exploit"

Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE

April 2026 — Security researchers have uncovered a severe and currently unpatched vulnerability in LeRobot, an open-source robotics framework developed under the Hugging Face ecosystem, that...