Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCE

Researchers disclosed CVE-2026-25874, a critical (CVSS 9.3) vulnerability in Hugging Face's LeRobot that enables unauthenticated remote code execution by deserializing attacker-controlled pickle payloads over unauthenticated gRPC channels. Validated against LeRobot 0.4.3, the flaw affects the PolicyServer and robot client, remains unpatched (fix planned for 0.6.0), and could lead to full host compromise, theft of credentials and models, lateral movement, and physical safety risks to connected robots.