CVE-2026-4963: huggingface smolagents Incomplete Fix CVE-2025-9959 local_python_executor.py evaluate_with code injection
A weakness has been identified in huggingface smolagents 1.25.0.dev0. This affects the function evaluateaugassign/evaluatecall/evaluatewith of the file src/smolagents/localpythonexecutor.py of the component Incomplete Fix CVE-2025-9959. This manipulation causes code injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4963?
CVE-2026-4963 has been classified with a high severity due to the potential for code injection in the vulnerable functions.
How do I fix CVE-2026-4963?
To fix CVE-2026-4963, upgrade the huggingface smolagents package to a version that addresses the code injection vulnerability.
What versions of huggingface smolagents are affected by CVE-2026-4963?
CVE-2026-4963 affects version 1.25.0.dev0 of the huggingface smolagents package.
What specific code functions are vulnerable in CVE-2026-4963?
The vulnerable functions in CVE-2026-4963 are evaluate_augassign, evaluate_call, and evaluate_with in local_python_executor.py.
Is CVE-2026-4963 an incomplete fix for another vulnerability?
Yes, CVE-2026-4963 is an incomplete fix for CVE-2025-9959, indicating that the initial mitigation efforts were not sufficient.