Hugging Face LeRobot Vulnerability Enables Unauthenticated Remote Code Execution Attacks

A critical unauthenticated remote code execution vulnerability (CVE-2026-25874, CVSS 9.8) was discovered in Hugging Face's LeRobot framework: unsafe use of Python's pickle to deserialize incoming protobuf byte streams in gRPC RPC handlers, combined with insecure gRPC port binding (add_insecure_port) and lack of authentication, allows network attackers to deliver crafted payloads that execute at deserialization time. The report details affected handlers, exploitation mechanics, and mitigation recommendations such as replacing pickle with safe serialization (e.g., JSON/protobuf/safetensors), enabling TLS (add_secure_port), and enforcing authentication and access controls.