LeRobot Deserialization Flaw Can Take Over Robots and Controllers
A single crafted pickle can compromise both sides of a LeRobot deployment. The bug is not just a server issue. It also reaches the robot client, so patching one component does not remove the attack surface if the other stays exposed.
CVE-2026-25874 affects Hugging Face LeRobot 0.4.3 and allows unauthenticated remote code execution through unsafe pickle deserialization over gRPC. The flaw sits in the async inference pipeline, where policy server and robot client components accept unauthenticated data without TLS.
That widens the blast radius across networked robots and controllers. An attacker who can reach the service can take over the host, steal secrets, move laterally, or disrupt physical operations, and the risk persists anywhere the platform is exposed on a network.