{"id":"CVE-2026-115533","revision":"0ef12a1967564e51b004ad8345425e9e","records":[{"revision":"0ef12a1967564e51b004ad8345425e9e","observedAt":"2026-10-26T20:35:31.018+00:00","statement":{"source":"cve-program","id":"CVE-2026-115533","aliases":[],"title":"CVE-2026-115533","description":"The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrained() method and related paths. When loading a policy's processor configuration from a repository,  the library uses the class field within the JSON configuration to dynamically resolve and instantiate Python classes using importlib.import_module() and getattr().","state":0,"publishedAt":"2026-10-26T19:38:54.907+00:00","modifiedAt":"2026-10-26T19:38:54.907+00:00","affected":[{"ecosystem":"Vendor product","name":"LeRobot","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Hugging Face\",\n                    \"product\": \"LeRobot\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0.4.0\",\n                            \"lessThanOrEqual\": \"0.6.1\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://gist.github.com/mtholmquist/eba1cba80ea66997b8f7e6a839e49120"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-115533","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-115533","identifiers":["CVE-2026-115533"]},"retained":false,"historicalAffected":[]}],"coverage":[]}