Hugging Face LeRobot Flaw Opens Door to Remote Code Execution Attacks

A critical RCE (CVE-2026-25874, CVSS 9.8) in Hugging Face’s LeRobot arises from using pickle.loads() to deserialize network data in gRPC handlers and initializing gRPC with add_insecure_port(), allowing unauthenticated attackers with network access to execute arbitrary system commands; the report details affected RPC endpoints, exploitation mechanics, developer comments suppressing linter warnings, exposure scenarios when bound to 0.0.0.0, and remediation steps including removing pickle, enabling TLS, and enforcing authentication.