CVE-2025-9959

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-9959
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9959.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-9959
Published
2025-09-03T16:53:46Z
Modified
2026-10-28T02:30:25Z
Severity
  • 7.6 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L CVSS Calculator
Summary
Sandbox escape in smolagents Local Python execution environment via dunder attributes
Details

Incomplete validation of dunder attributes allows an attacker to escape from the Local Python execution environment sandbox, enforced by smolagents. The attack requires a Prompt Injection in order to trick the agent to create malicious code.

Database specific 
{
    "cna_assigner":  "JFROG",
    "cwe_ids":  [
        "CWE-94"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/9xxx/CVE-2025-9959.json"
}
References

Affected packages

Git / github.com/huggingface/smolagents

Affected ranges

Type
GIT
Repo
https://github.com/huggingface/smolagents
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
420eaebf2b7ebc1461b5b669f8af1bef1b9bd00e
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "fixed":  "1.21.0"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandardRange"
        }
    ]
}

Affected versions

v0.*
v0.1.0
v1.*
v1.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9959.json"