CVE-2026-115533
Low risk· EPSS 28%Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrained() method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically resolve and instantiate Python classes using importlib.import_module() and getattr().
Risk Assessment
An attacker could supply a malicious configuration in a repository, leading to arbitrary code execution in the context of the application using LeRobot. This may result in full system compromise or data theft.
Recommendation
Update the LeRobot library to a version containing the fix or restrict configuration loading to trusted repositories only. Consider validating the class field and avoiding dynamic import of unknown classes.
Other vulnerabilities in LeRobot
Original NVD description (English source)
The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from_pretrained() method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically resolve and instantiate Python classes using importlib.import_module() and getattr().
Vulnerability data from NVD (NIST) · CISA KEV · EPSS